v0.9.1

Changes since v0.9.0

• chore(workspace): prepare GitHub release v0.9.1 (1ff865c2)
• docs(runtime): close out I251 and RUNTIME-007 (#499) (#506) (8ccd020e)
• fix(runtime): terminalize pre-provider rejected submissions (#499) (#505) (c9225abf)
• docs(runtime): activate I251 claim for #499 (bd864366)
• Merge pull request #503 from wjhuang88/impl/i250-full-workspace-upgrade (891c7800)
• fix(dependencies): remove duplicate baseline marker (#474) (3eb0d6af)
• docs(dependencies): refresh accepted baseline table (#474) (e57fc023)
• docs(dependencies): close I250 accepted baseline (#474) (e10eafe2)
• feat(workspace): complete full dependency upgrade (#474) (76f0a41b)
• docs(workspace): close I248 and activate full dependency upgrade (#474) (ea9a4c37)
• docs(workspace): sync dependency governance status (#474) (97489a47)
• docs(workspace): reconcile issue status for dependency claim (#474) (1cf678cb)
• docs(runtime): register pre-provider rejection issue (#499) (7a264bc1)
• docs(workspace): exclude runtime issue from dependency upgrade scope (#474) (b03aa168)
• docs(workspace): finalize dependency governance closeout (#474) (d2451fff)
• Merge pull request #498 from wjhuang88/governance/i248-closeout-full-upgrade-plan (a7d168ee)
• fix(workspace): complete dependency audit acceptance gates (#474) (5d2e4443)
• docs(workspace): complete dependency upgrade claim metadata (#474) (16dd1dcc)
• docs(workspace): close dependency governance and plan full upgrade (#474) (376c2ae3)
• Merge pull request #497 from wjhuang88/impl/i248-dependency-governance (7b4e21ce)
• fix(workspace): align dependency report ordering (#474) (dbd847ec)
• feat(workspace): establish dependency audit governance (#474) (1a98048f)
• test(workspace): verify dependency audit frontend parity (#474) (adb5bb94)
• docs(governance): plan one dependency upgrade pilot (#474) (1e9bff7f)
• feat(workspace): classify live dependency drift (#474) (7254efd3)
• docs(governance): record dependency audit implementation evidence (#474) (977f2631)
• feat(workspace): implement dependency audit frontends (#474) (0806f5f1)
• docs(governance): plan dependency governance closed loop (#474) (#496) (7c3f6421)
• docs(task): finalize steering capability ledger (#467) (#495) (e336e438)
• docs(task): close steering and capability seam plan (#467) (#494) (ce3d4cb9)
• docs(i246): close CAP-001-P0 compatibility preparation (#467) (#493) (2289fb80)
• refactor(text): establish CAP-001 compatibility seam (#467) (#492) (9a3c1d86)
• Merge pull request #491 from wjhuang88/i246-narrow-claim (f913d28b)
• fix(governance): keep I246 claim nonterminal (#467) (8d2fec27)
• fix(governance): add I246 nonterminal inventory (#467) (94e75a0f)
• fix(governance): bind I246 claim PR metadata (#467) (13d8425c)
• docs(governance): retain I246 bounded code alignment (#467) (b7b24e73)
• docs(governance): narrow I246 characterization claim (#467) (049d0c99)
• Merge pull request #490 from wjhuang88/chore/i208-closeout (5e8e9302)
• docs(governance): close I208 steering boundary (#267) (860c22ce)
• Merge pull request #489 from wjhuang88/fix/i208-steering-runtime-boundary (442d143b)
• fix(agent): complete same-turn steering handoff (#I208) (8a502c26)
• Merge pull request #488 from wjhuang88/impl/i208-tui050-steering-insertion-boundary (5abc6eb8)
• docs(tui): bind I208 implementation candidate (#I208) (f5fe914f)
• docs(tui): record I208 activation and local convergence (#I208) (9d54637f)
• feat(cli): insert steering at tool boundaries (#I208) (af72122a)
• Merge pull request #487 from wjhuang88/governance/i208-claim-owner-first-v2 (75ca8057)
• docs(workspace): sync I208 claim views (#I208) (d3b1d94e)
• docs(tui): establish I208 claim owner record (#I208) (ce70b651)
• Merge pull request #485 from wjhuang88/governance/i207-closeout-owner-first-v2 (2edb914f)
• docs(workspace): sync I207 closeout views (#I207) (799d561c)
• docs(tui): close I207 owners after acceptance (#I207) (6ce5e7bb)
• fix(tui): wrap queued steering rows within padding (#I207) (ca3b2fa7)
• docs(governance): sync I207 activation state (#267) (c6dfb476)
• docs(governance): activate I207 steering wrap padding (8ff4c6f1)
• docs(plan): schedule steering and capability seam sequence (#467) (c1f7e83d)
• docs(release): close out v0.9.0 publication (#I245) (a401a35d)

Compare: v0.9.0...v0.9.1

Downloads

Platform	Architecture	File
Linux	x86_64	talos-x86_64-linux.tar.gz
Linux	ARM64	talos-aarch64-linux.tar.gz
macOS	Apple Silicon	talos-aarch64-darwin.tar.gz
macOS	Intel	talos-x86_64-darwin.tar.gz
...

v0.9.0

Talos v0.9.0

Talos v0.9.0 advances the pre-1.0 runtime from a CLI-centered agent into a more complete,
embeddable work-execution platform while keeping local operator control and fail-closed permission
boundaries.

Highlights

• Goal-oriented work foundation: canonical Work and Todo compatibility, completion claims,
  independently evaluated outcomes, and a UI-neutral mission delivery gate.
• Supervised background commands: bounded background process lifecycle, model-readable job
  control, cross-platform process ownership, and interactive status projection.
• Model-assisted permissions: /auto session control, model-first triage for eligible bounded
  read-only actions, generic shell-effect classification, visible review outcomes, and safe fallback
  to human approval whenever confidence or context is insufficient.
• Runtime lifecycle hardening: bounded shutdown admission and ordered durable finalization for
  embedded runtimes and session owners.
• Dashboard activity visibility: the loopback Dashboard can project live activity and logs
  without exposing its access token.
• TUI reliability: resumed-session interaction, bounded reconnect progress, permission/tool
  correlation, composer-relative panels, history-tail stability, and stricter tool-placeholder
  handling.
• Current model catalog: the packaged offline catalog was refreshed from models.dev for this
  release; normal startup and builds remain network-independent.

Install

Download a platform archive from this GitHub Release, or install the CLI from crates.io after the
registry publication stage completes:

cargo install talos-cli --version 0.9.0 --locked

The installed executable is talos.

SDK

talos-runtime and its registry dependency closure are published at 0.9.0. The runtime remains
pre-1.0 and its public APIs are semver-sensitive; RUNTIME-006 continues to own the stronger goal of
making talos-runtime the only direct Talos dependency needed for every supported extension seam.

Safety And Compatibility

• Talos remains a local developer tool, not a hardened remote multi-user service.
• Write-capable tools continue through the permission pipeline.
• Automatic review is bounded and fail-closed; it does not turn auto into unrestricted execution.
• talos-models remains quarantined and is not published.
• This minor release may include pre-1.0 API and behavior changes. Review configuration and
  integration changes before upgrading production-like embedding environments.

Changes since v0.8.0

• chore(release): prepare v0.9.0 publication (#I245) (fad6e24e)
• Merge pull request #479 from wjhuang88/governance/i245-v090-release-claim (c6e453a4)
• docs(release): finalize v0.9.0 claim metadata (#I245) (967c220a)
• docs(release): finalize v0.9.0 claim metadata (#I245) (14b63d5e)
• docs(release): prepare v0.9.0 publication claim (#I245) (6168a4a6)
• Merge pull request #477 from wjhuang88/docs/adr071-scoped-remote-gates (336c65e0)
• docs(governance): scope remote gates around local convergence (#ADR-071) (2fd98bf3)
• Merge pull request #478 from wjhuang88/docs/i244-closeout (ba1f8720)
• docs(permission): close I244 shell auto classifier (#I244) (75cecfef)
• Merge pull request #473 from wjhuang88/fix/i244-configured-ask (11c6dc28)
• fix(agent): expose auto decisions and reject unhealthy sandbox (#I244) (6bcc8eca)
• fix(sandbox): bound shell execution wait (#I244) (63358c8a)
• fix(agent): tolerate wrapped classifier JSON responses (#I244) (ac0297eb)
• test(agent): name default ask classifier regression accurately (#I244) (f4906c1a)
• fix(agent): route configured ask through auto classifier (#I244) (ed75d46f)
• Merge pull request #476 from wjhuang88/docs/register-issues-474-475 (6f4980b9)
• docs(governance): register dependency and memory intake issues (#474 #475) (345e2f29)
• Merge pull request #472 from wjhuang88/fix/i244-panel-follow-tail (fdf927fe)
• fix(tui): keep all panels adjacent to follow tail (#I244) (4dcc21fb)
• Merge pull request #471 from wjhuang88/fix/i244-shell-classifier-runtime (abe0c45b)
• fix(tui): preserve history tail when approval opens (#I244) (71b84bf5)
• fix(conversation): expose configured auto evaluator status (#I244) (41ff131c)
• fix(permission): keep shell classifier independent from atomic create (#I244) (1a99a900)
• Merge pull request #470 from wjhuang88/chore/i244-validation-tracker (fad8f981)
• docs(permission): point deferred I244 validation to open issue (#I244) (71f13fbb)
• Merge pull request #469 from wjhuang88/chore/i244-closeout (1439c7d0)
• docs(permission): close out I244 implementation evidence (#I244) (f2c27619)
• feat(permission): add generic shell auto classifier (#I244) (4ba1b79f)
• fix(agent): fail closed on incomplete shell context (#I244) (4342caa6)
• docs(governance): reconcile capability architecture intake (#I244) (a71b4052)
• docs(governance): bind I244 implementation PR (#I244) (c9c7e0bc)
• docs(governance): stage I244 implementation review (#I244) (035aaf25)
• feat(agent): harden generic shell auto classifier (#I244) (7e916db2)
• feat(agent): classify foreground shell effects with auto assessor (#462) (a0ec5f41)
• docs(workspace): sync I244 activation records (#462) (f9467a45)
• docs(workspace): activate I244 claim after merge (#462) (740bc36b)
• Merge pull request #465 from wjhuang88/governance/i244-shell-classifier-claim (94ba2dc5)
• docs(governance): add I244 nonterminal inventory (#I244) (f7b56662)
• docs(governance): claim I244 shell classifier implementation (#I244) (5a475f53)
• docs(governance): prepare I244 implementation claim (#I244) (3d1b0f39)
• Merge pull request #464 from wjhuang88/governance/i243-adr070-acceptance (be4fbcfc)
• docs(governance): accept ADR-070 and close I243 (#I243) (3f8d1c0d)
• docs(governance): activate I243 after claim merge (#I243) (6aa12523)
• Merge pull request #463 from wjhuang88/chore/i243-shell-effect-planning (cc4f22e5)
• docs(governance): reconcile I243 issue owner (#I243) (3df7a96e)
• docs(governance): finalize I243 decision claim (#I243...

v0.8.0

Changes since v0.7.0

• Merge pull request #264 from wjhuang88/feat/i203-v080-release (f425e7bc)
• fix(release): align publication guard policy with closure (#I203) (d5de4a65)
• fix(release): publish the complete CLI dependency closure (#I203) (d8e1aa26)
• chore(release): prepare v0.8.0 GitHub-first publication (#I203) (b0354ae6)
• Merge pull request #263 from wjhuang88/docs/i203-activate (2302c95a)
• docs(release): activate I203 publication implementation (#I203) (a42e8da6)
• Merge pull request #262 from wjhuang88/docs/i203-claim (f6b2d243)
• docs(release): prepare I203 publication claim (#I203) (32da1015)
• Merge pull request #261 from wjhuang88/docs/i204-closeout (8eaa22a2)
• docs(release): close I204 readiness with reviewed evidence (#I204) (fae725f4)
• Merge pull request #260 from wjhuang88/docs/i204-v080-readiness-evidence (7c10afe3)
• docs(release): record I204 v080 readiness evidence (#I204) (f46094e3)
• Merge pull request #259 from wjhuang88/docs/i204-activate (dbc84f15)
• docs(release): activate I204 readiness evidence (#I204) (8110f576)
• docs(release): prepare I204 candidate readiness claim (#257) (e6cab51a)
• docs(release): prepare I204 candidate readiness claim (#257) (17f006fd)
• docs(runtime): close I162 readiness evidence (9fc2c7f1)
• docs(runtime): close I162 readiness evidence (#I162) (9f231291)
• feat(runtime): external SDK publication readiness fixture (I162) (16564ba0)
• feat(runtime): add external SDK publication readiness fixture (#I162) (077b347d)
• Merge pull request #254 from wjhuang88/docs/i162-activate (2891105d)
• docs(governance): activate I162 readiness work (#I162) (87d1fa0c)
• Merge pull request #253 from wjhuang88/docs/i162-claim (38127228)
• docs(governance): finalize I162 readiness claim (#253) (913a3318)
• docs(governance): prepare I162 readiness claim (#I162) (d2c1840a)
• Merge pull request #252 from wjhuang88/docs/i161-closeout-final (2301434a)
• docs(governance): close I161 security delivery (#I161) (bbfaa6e9)
• Merge pull request #251 from wjhuang88/feat/runtime-I161-matrix-closure (da5a43a2)
• docs(governance): bind I161 matrix closure follow-up (#251) (8b3ca5fc)
• test(agent): close I161 sandbox fallback matrix (#I161) (3ca2ec62)
• Merge pull request #250 from wjhuang88/feat/runtime-I161-sandbox-fallback (d2b4bdd1)
• fix(agent): scope unresolved permission denial to fallback (#I161) (74c5502d)
• docs(governance): bind I161 implementation review evidence (#250) (822bb0b2)
• fix(agent): enforce fallback permission and preserve tool overrides (#I161) (c8141d49)
• fix(runtime): expose sandbox fallback contract alias (#I161) (96f86018)
• feat(runtime): add governed sandbox fallback and coding preset (#I161) (cf55a0b7)
• Merge pull request #249 from wjhuang88/docs/i161-formal-security-review (bd262479)
• docs(security): record I161 formal review result (#245) (7fb25899)
• Merge pull request #248 from wjhuang88/docs/i161-activate-v2 (da6f7540)
• docs(governance): activate I161 security-gated slice (588eded1)
• Merge pull request #246 from wjhuang88/docs/i161-review-gate (cabb7fa1)
• fix(governance): normalize review issue owner row (6ae46c76)
• fix(governance): register I161 review issue (6759f436)
• docs(governance): record I161 security review gate (f990a0dc)
• Merge pull request #244 from wjhuang88/docs/i161-claim (b570ac27)
• fix(governance): normalize I161 claim fields (1c42123e)
• docs(governance): backfill I161 claim PR #244 (20c4c752)
• docs(governance): prepare unattended I161 claim gate (4cf1155b)
• Merge pull request #243 from wjhuang88/docs/i160-closeout (d5cead10)
• docs(governance): close I160 with implementation evidence (71710d2e)
• Merge pull request #241 from wjhuang88/docs/i160-derived-sync (2d48bd2c)
• docs(governance): preserve I160 checkpoint history (80607e61)
• Merge remote-tracking branch 'origin/main' into docs/i160-derived-sync (fca2d013)
• Merge pull request #242 from wjhuang88/docs/governance-manifest-reduced-ci (ffcb690d)
• ci(governance): classify manifest as reduced text validation (a31705d3)
• docs(governance): align I160 owner state after merge (acf59617)
• docs(governance): sync I160 derived views after merge (31ce8d09)
• Merge pull request #240 from wjhuang88/feat/runtime-I160-shared-composition (97556149)
• docs(governance): link I160 implementation PR #240 (fd82a683)
• feat(runtime): share CLI and SDK tool composition (#ARCH-031-B) (0524e82f)
• Merge pull request #239 from wjhuang88/feat/runtime-I160-shared-composition (2b76b4e9)
• docs(governance): activate I160 shared composition (#ARCH-031-B) (74937542)
• docs: finalize I160 claim governanc...

v0.7.0

Highlights

1. Transactional batched steering turns. Compatible input accepted while one model Turn is
   active becomes one bounded later Turn. Original user-item boundaries, attachments, and FIFO
   order survive Provider adaptation and durable replay; no delimiter join or single-item drain
   can lose or reorder user content.
2. Durable receipt-based ownership transfer. The Session Actor acknowledges submissions only
   after atomically persisting them in a versioned Session-scoped pending journal separate from
   successful transcript. Canonical receipts distinguish accepted, duplicate, and rejected
   states; lost-Ack reconciliation never blind-rolls back or resends. Restart recovery
   finalizes by Turn identity without re-execution.
3. Generation-safe lifecycle and single Actor authority. Session generations are durable;
   live replacement advances a generation only after admission is fenced and the old Scheduler
   and Actor are acknowledged as retired. The Actor maintains at most one active Turn, ordinary
   Submit never implicitly cancels active work, and Scheduler delivery shares the same
   structured envelope, generation, and receipt boundary.
4. Exact request-plan and transcript-first finalization. Every initial and continuation
   Provider call validates and dispatches one sealed exact request plan containing all
   model-visible request components, including dynamic prompts, context, history, tools,
   structured input, multimodal cost, and output reserve. Successful transcript is committed
   before pending-journal finalization; ambiguous crash-recovery custody fails closed rather
   than replaying.

Talos remains pre-1.0. This release is a local developer product snapshot carrying the accepted
I169 transactional steering boundary (ADR-056); it does not claim REL-002 readiness, stable 1.0
SDK guarantees, crates.io publication, or completion of the active v0.6 Runtime Productization
Program.

Changes since v0.6.1

• fix(release): correct v0.7.0 closeout governance status (58e48fed)
• docs(release): record v0.7.0 closeout evidence (3a043fb8)
• chore(release): prepare v0.7.0 (95351f64)
• docs(governance): close I169 after PR #131 merge (#137) (99d5950e)
• test(tools): scope link sanitization assertion to URL (c20bae84)
• docs(iteration): restore complete I169 closed claim (5e461d18)
• docs(tui): restore complete closed collaboration claim (14d9f0ff)
• docs(tui): normalize TUI-044 completion evidence (e0933d3d)
• docs(governance): reconcile open issues after I169 closeout (eaecbe20)
• docs(tui): register TUI-047 delete recovery diagnostics (2deb350a)
• docs(board): reflect I169 completion and issue 136 follow-up (ed65663b)
• docs(backlog): close TUI-044 and retain issue 136 residual (14eb32a6)
• docs(decisions): index ADR-056 as accepted (240fc3b0)
• docs(iterations): index I169 as complete (7786bbcc)
• docs(governance): record I169 completion and ADR acceptance (cf521c2c)
• docs(adr): accept ADR-056 with I169 evidence (3e6a7f8e)
• docs(iteration): complete I169 after accepted merge (d69abb4d)
• docs(tui): close TUI-044 after PR 131 merge (ed2b4e98)
• Merge pull request #131 from wjhuang88/feat/i169-tui-044-transactional-steering (685d3b4f)
• chore(ci): trigger exact-head validation after review follow-up (90165cac)
• fix(session): make artifact recovery instructions executable (df415e98)
• chore(ci): rely on executable recovery tests (33cbb70b)
• chore(ci): validate I169 review follow-up (0d2791a3)
• chore(ci): harden I169 follow-up patch driver (bf69b979)
• chore(ci): stage I169 review follow-up patch (444318fd)
• chore(ci): trigger final exact-head validation (cc3ef56d)
• docs(governance): sync PR 131 remediation evidence (12db02a8)
• chore(ci): rely on canonical governance validators (69aaec10)
• chore(ci): pass governance project root (c16b0f35)
• chore(ci): stage I169 governance evidence sync (c8b90aba)
• fix(session): bound reconciliation and harden Windows tests (40e4bb95)
• chore(ci): fix owner-marker patch template quoting (2871599b)
• chore(ci): supersede obsolete remediation runs (925b9f1b)
• chore(ci): scope owner marker to runtime identity initialization (f4bc2267)
• chore(ci): format Windows patch before validation (c1c37980)
• chore(ci): apply duplicate fixture repair before verification (54c57cfd)
• chore(ci): repair duplicate redirect fixture patch (12fa13ca)
• chore(ci): verify bounded reconciliation and Windows repair (e9c41096)
• chore(ci): stage bounded reconciliation and Windows repair (81889911)
• fix(tui): roll back failed Session ownership (ef39359b)
• chore(ci): assert restored Session ownership (7c8989c8)
• chore(ci): use structural rollback test repairs (9160b87f)
• chore(ci): fix rollback ownership test compilation (9452f856)
• chore(ci): repair publication-test patch anchors (503f8ad4)
• chore(ci): verify transactional rollback remediation (5b31146d)
• chore(ci): stage transactional rollback remediation (e89b5519)
• fix(session): make artifact cleanup retryable (793662df)
• chore(ci): make orphan accounting assertion portable (495f403b)
• chore(ci): run reviewed I169 artifact patch (302c5fff)
• chore(ci): add reviewed I169 artifact patch (662168ff)
• chore(ci): repair exact I169 patch anchors (264e94a4)
• chore(ci): stage I169 artifact lifecycle remediation (c2ca7bb6)
• chore(ci): remove temporary TUI fork workflow ([0e529a3](0e529a31cc84a4511447567fc07d2...

v0.6.1

Highlights

1. Transactional, source-aware tool composition. Tool factories now carry stable contribution
   identities, checked registration rejects collisions deterministically, and multi-tool batches
   apply atomically across core, session, tools, CLI, and explicit local plugins.
2. Provider terminal-outcome integrity. OpenAI- and Anthropic-compatible streaming paths now
   preserve known terminal outcomes, bound diagnostics, and keep stdout/stderr ordering explicit
   under malformed or dual-protocol responses.
3. Durable configuration mutation. Provider removal and credential clearing use shared mutation
   locking, journaled recovery, and latest-state semantic updates so stale interactive snapshots do
   not restore deleted configuration.
4. Terminal interaction reliability. Composer continuity, interrupt handling, approval contrast,
   resize behavior, and terminal closeout received additional regression and real-terminal evidence.

Talos remains pre-1.0. This patch release is a local developer product snapshot; it does not claim
REL-002 readiness, stable 1.0 SDK guarantees, crates.io publication, or completion of the active
v0.6 Runtime Productization Program.

Changes since v0.6.0

• chore(release): prepare v0.6.1 (ad0a81b5)
• chore(release): repair v0.6.1 workflow yaml (6f72f6ee)
• chore(release): revalidate v0.6.1 after main advances (e12060d3)
• feat(tools): define sourced symbol contributions (#85) (2cae07e2)
• chore(release): publish v0.6.1 via one-shot GitHub workflow (b4da3189)
• feat(tools): centralize read-image contribution (#82) (8daa0182)
• Merge pull request #77 from wjhuang88/feature/i158-checked-plugin-contributions (9d510e84)
• feat(cli): register explicit plugins transactionally (a6d03cfe)
• chore: apply checked plugin contributions (5b0e237c)
• chore: stage checked plugin contribution migration (66d6d628)
• feat(core): add transactional contribution batches (#76) (37e369b1)
• feat(cli): consume Git tool contributions (#75) (949d995d)
• feat(tools): define sourced Git contribution factories (#74) (c7bf5a61)
• feat(cli): consume session todo contributions (#73) (0f7046aa)
• feat(session): define sourced todo tool contributions (#72) (c1068008)
• feat(core): add checked tool contributions (#71) (5ba8fd1e)
• docs(architecture): accept ADR-053 and activate I158 (#70) (f5df678f)
• chore: remove accidental empty file (e539537d)
• noop (dec7fdbe)
• Merge pull request #67 from wjhuang88/agent/i168-terminal-closeout (43a63e30)
• docs(reference): clarify reviewed terminal validation (#RUNTIME-003 #I168) (14b48e4d)
• docs(iteration): record I168 terminal outcome evidence (#RUNTIME-003 #I168) (8c686f8b)
• chore: correct final I168 governance evidence fields (913720d1)
• chore: stage final I168 review evidence replay (b65c5743)
• chore: trigger final I168 evidence sync (c00cefe3)
• chore: synchronize final I168 review evidence (5e767e7a)
• docs(reference): keep I168 review evidence stable (#RUNTIME-003 #I168) (08e24c63)
• docs(reference): retrigger I168 final CI (#RUNTIME-003 #I168) (0bccfaf4)
• docs(reference): finalize clean I168 review evidence (#RUNTIME-003 #I168) (d39ed1e1)
• docs(reference): confirm clean I168 review closeout (#RUNTIME-003 #I168) (d8064857)
• chore: remove I168 review evidence helper (1316d1f6)
• chore: restore standard CI after I168 review verification (7d4fb96a)
• chore: apply I168 review evidence synchronization (0a69d018)
• docs(reference): clarify I168 negative terminal assertions (#RUNTIME-003 #I168) (b6a65dba)
• chore: stage I168 review evidence synchronization (ac577719)
• docs(iteration): record I168 review correction evidence (#RUNTIME-003 #I168) (8651ed39)
• chore: stage I168 review closeout evidence (4cb87f94)
• chore: run I168 review revalidation (aebe8645)
• chore: remove I168 review execution artifacts (86262d02)
• fix(provider): classify known terminal policies (#RUNTIME-003 #I168) (c570991b)
• chore: remove duplicate I168 review workflow (faef2845)
• chore: correct I168 review patch generation (57ea9068)
• chore: execute I168 review correction through CI (17534906)
• chore: trigger I168 review correction (973df4f4)
• chore: add I168 review correction workflow (87e9e92e)
• chore: stage I168 review correction patch (223014be)
• docs(reference): record I168 final validation packet (#RUNTIME-003 #I168) (30a189ca)
• docs(iteration): record I168 terminal outcome evidence (#RUNTIME-003 #I168) (7ea3dc34)
• chore: execute validated I168 closeout packet (a1a9b84d)
• chore: trigger I168 governance closeout (c0e7def3)
• chore: stage I168 governance closeout (7d0e5aec)
• chore: add I168 closeout validation workflow (62ae098d)
• test(runtime): add deterministic terminal outcome fixtures (#RUNTIME-003 #I168) (2eac5b05)
• fix(cli): surface MaxTokens truncation in print mode (#RUNTIME-003 #I168) (dda2170f)
• chore: trigger I168 print-mode apply workflow (6a639c64)
• chore: add I168 print-mode apply workflow (6fcb4272)
• chore: stage I168 print-mode implementation patch (827a33ec)
• chore: finalize I168 closeout PR trigger ([087e0a6](https:...

v0.6.0

Highlights

1. Resize-safe alternate-screen TUI. Interactive history, startup logo, fixed panes, scrolling,
   and cursor placement now use one application-owned full-frame renderer. Repeated resize no
   longer relies on native terminal scrollback, DECSTBM, or terminal reflow for correctness.
2. Agent-mediated image inspection. Vision-capable models can request the permission-gated
   read_image tool. Exact-path authorization, bounded decoding, capability checks, and one-shot
   continuation keep local image access explicit and recoverable.
3. Adaptive terminal output. Tool calls, tool results, CJK content, fill rows, and streaming
   history are projected from geometry-free transcript facts at the current viewport width.
4. Safe shared Skill discovery. Runtime Skill discovery now includes
   ~/.agents/skills/ by default, with an opt-out and policy-controlled symbolic-link traversal
   that remains disabled by default.

Talos remains pre-1.0. This release is a local developer product snapshot; it does not claim
REL-002 readiness, stable 1.0 SDK guarantees, crates.io publication, or completion of the active
v0.6 Runtime Productization Program.

Changes since v0.5.0

• chore(workspace): prepare v0.6.0 release (8eaa8dd)
• docs(governance): authorize I164 execution on main (#TUI-038) (26e7eaf)
• docs(governance): close I163 and activate I164 (#SKILL-003 #TUI-038) (f5b9638)
• docs(tui): schedule startup inline composer continuity (#TUI-038 #I164) (c600110)
• docs(skill): record I163 test-isolation correction (#SKILL-003) (accaeb1)
• test(skill): inject shared home without mutating process environment (#SKILL-003) (12ef1e3)
• docs(backlog): sync PRODUCT-BACKLOG row 0 to I163 Active (#SKILL-003) (dea852a)
• docs(skill): record Oracle review and TOCTOU fix in I163 (#SKILL-003) (aaa9d5c)
• fix(skill): close root-link TOCTOU via follow_root_links(false) (#SKILL-003) (e11481d)
• docs(skill): synchronize I163 shared-default and boundary decisions (#SKILL-003) (f9a7803)
• test(skill): cover linked discovery boundaries and budgets (#SKILL-003) (a0079dd)
• fix(skill): reject linked targets before traversal (#SKILL-003) (b7e3704)
• fix(skill): wire maintainer-approved shared discovery default (#SKILL-003) (bfb8c22)
• feat(config): enable shared skill discovery by default (#SKILL-003) (04999f1)
• docs(session): add title summary and rename story (#SESSION-007) (a2871a0)
• fix(skill): enforce linked discovery traversal boundaries (#SKILL-003) (5acf625)
• docs(backlog): align TUI and context tasks after I156 close (#CTX-001 #TUI-036 #TUI-037) (862e526)
• docs(context): add bounded runtime meta backlog item (#CTX-001) (2b97271)
• docs(iteration): close I156/TUI-035 complete — maintainer Alacritty walkthrough passed (#I156 #TUI-035) (be77b18)
• refactor(skill): policy-controlled linked discovery (#SKILL-003) (ea3cc74)
• docs(tui): record logo wheel boundary correction (#TUI-035) (117fe4f)
• fix(tui): make logo prefix reachable by wheel scrolling (#TUI-035) (d4d95ad)
• docs(tui): record screenshot interaction correction (#TUI-035) (8859c57)
• fix(tui): restore history styling and wheel scrolling (#TUI-035) (dd10a62)
• docs(tui): record startup logo history prefix (#TUI-035) (2dfc4e0)
• fix(tui): append first message below startup logo (#TUI-035) (dddf32f)
• docs(tui): record startup logo spacing evidence (#TUI-035) (f979b65)
• fix(tui): add breathing room above startup logo (#TUI-035) (635bc29)
• docs(tui): accept alternate-screen logo startup (#TUI-035) (cf44626)
• fix(tui): render startup logo in alternate screen (#TUI-035) (9c87d0f)
• feat(skill): follow symlinks and Windows junctions during discovery (#TUI-035) (1f5e451)
• docs(tui): restore native-history architecture authority (#TUI-035) (c038852)
• fix(tui): restore native scrollback with logical transcript (#TUI-035) (31e7a0d)
• docs(tui): mark TUI-035 DECSTBM plan superseded (#TUI-035) (1de24fb)
• fix(tui): hide clipped modal cursors (#TUI-035) (ad67fc5)
• docs(iteration): record I156 final anchor and layout correction (#TUI-035) (7fc297f)
• test(tui): enforce logical anchor interval semantics (#TUI-035) (1688e6f)
• fix(tui): separate layout priority and final cursor coordinates (#TUI-035) (18648a6)
• fix(tui): correct logical anchor boundaries and offsets (#TUI-035) (6c32d09)
• docs(iteration): record I156 logical-scroll and recovery correction (#TUI-035) (a1885ac)
• fix(tui): bound component layout and cursor targets (#TUI-035) (a2e3ddb)
• fix(tui): implement logical history navigation and recovery (#TUI-035) (538bb44)
• docs(iteration): record I156 full-frame invariant correction (#TUI-035) (eb7e2e2)
• refactor(tui): remove legacy terminal insertion test architecture (#TUI-035) (8b7a272)
• refactor(tui): add anchored history projection (#TUI-035) (03c3a0f)
• docs(iteration): record I156 renderer architecture correction evidence (#TUI-035) (3ab230e)
• refactor(tui): unify history and bottom pane in one frame (#TUI-035) (a3074ad)
• docs(tui): record resize isolation failure and propose app-owned rendering (#TUI-035) (dcd269d)
• docs(iteration): record I156 semantic-row recovery correction (#TUI-035) (9aaabf0)
• fix(tui): preserve all uncommitted physical history rows (#TUI-035) (6909675)
• docs(iteration): record I156 FIFO and failure-recovery correction (#TUI-035) (9fc60ad)
• fix(tui): preserve pending history order and failure recovery (#TUI-035) (b24d9e0)
• docs(iteration): record I156 FIFO and ...

v0.5.0

Highlights

1. Configure and switch compatible providers from the TUI. /connect and /model are now
   parameterless pickers: add an OpenAI- or Anthropic-compatible provider, discover its bounded
   model list, and switch the active session using structured provider/model identity.
2. Attach local images safely to vision-capable models. /attach, /attachments, and
   /detach support PNG, JPEG, GIF, and WebP attachments with capability fail-closed behavior,
   exact-path approval, format/size/pixel checks, replacement detection, and path-safe history
   summaries. Print mode also supports an explicit --attach argument.

Talos remains pre-1.0. OpenAI-compatible image attachment was verified in a live terminal;
Anthropic-compatible image wire mapping is covered by deterministic fixtures, while a live
Anthropic-provider check depends on operator credentials.

Changes since v0.4.0

• chore(workspace): release v0.5.0 (3eec574)
• docs(iteration): refresh release candidate evidence (#I153) (c86c0ec)
• docs(iteration): close provider discovery flow (#I148) (6ec5bbc)
• docs(iteration): close safe image ingestion (#I151) (dcf43a2)
• docs(iteration): close capability foundation (#I150) (e110fbb)
• docs(iteration): record Anthropic acceptance gate (#I152) (4d6b3bc)
• docs(iteration): record text-only acceptance (#I152) (df7e661)
• docs(iteration): record detach acceptance (#I152) (0cc02e0)
• docs(iteration): record capability-gate acceptance (#I152) (432b3f2)
• docs(iteration): record filename acceptance (#I152) (8c14476)
• fix(cli): render attachment filename literally (#I152) (65eb108)
• fix(cli): keep attachment underscores visible (#I152) (890c60a)
• fix(cli): preserve attachment filename display (#I152) (453c30e)
• fix(cli): apply initial model capability state (#I152) (1d86996)
• fix(tui): show pending image attachments in status (#I152) (d342ad0)
• docs(iterations): close slash-prefix retest (#I146) (d6b108e)
• fix(tui): prioritize slash command prefixes (#I146) (7f6972a)
• fix(cli): preserve raw picker model identity (#I148) (f89313c)
• docs(iterations): close queued steering acceptance (#I145) (3ab22ac)
• fix(tui): clear transient queue preview rows (#I145) (1039430)
• docs(iterations): close parameterless command acceptance (#I146) (14d4c67)
• docs(iterations): close custom provider wizard acceptance (#I147) (4e50ec1)
• fix(tui): make provider wizard inputs visible (#I147) (1c843b2)
• fix(tui): restore parameterless command and wizard flows (#I146 #I147) (0ef2f68)
• docs(governance): close stale Review records (c735b74)
• docs(governance): consolidate Review closure evidence (4bd78e7)
• fix(cli): remove unsafe from P1-fix3 tests + sync I148 to Review (#MODEL-008-B #I148) (a01edc5)
• fix(cli): real handle_session_model integration tests + move semver note to ADR-048 (#MODEL-008-B #I148) (834400b)
• fix(cli): bridge integration tests + ADR-049 semver migration note (#MODEL-008-B #I148) (4d5f8d7)
• fix(cli): preserve provider identity in model switch lifecycle (#MODEL-008-B #I148) (187f13d)
• chore(governance): require completion commit evidence (27bf29d)
• docs(iterations): I148 P1 closeout checkpoint — discovery→activation loop proven (#MODEL-008-B #I148) (d910166)
• feat(cli): close discovered-model activation loop with 7 P1 tests (#MODEL-008-B #I148) (23db287)
• docs(workspace): record closeout task checkpoint (7b5de2c)
• docs(workspace): plan product closeout long task (e7754bc)
• docs(tui): define adaptive history width requirement (#TUI-034) (4aa0480)
• docs(workspace): reconcile provider multimodal iteration status (#MODEL-008 #MODEL-009) (7944b01)
• test(cli): cover image attachment security regressions (#MODEL-009 #I151 #I152) (17e3fef)
• fix(security): return canonical path from authorization + bounded read eliminates metadata-read window (#MODEL-009 #I151 #I152) (5edd8b9)
• fix(security): P1-A fail-closed + canonical-path authorization + P1-B single-snapshot validation (#MODEL-009 #I151 #I152) (c8ee5a5)
• fix(security): P1-A permission pipeline + P1-B content digest for image attachments (#MODEL-009 #I151 #I152) (6b04c12)
• docs(iterations): sync I148/I151/I152 status after R3-R11 rework (#MODEL-008 #MODEL-009) (bb543ef)
• feat(provider): persist discovered models atomically so /model picker surfaces them (#MODEL-008-B #I148) (d5a28e1)
• fix(tui): render Multimodal safe summary in scrollback instead of dropping (#MODEL-009-D #I152) (f025375)
• feat(cli): add --attach flag for print mode with capability gate (#MODEL-009-D #I152 #I153) (09c5096)
• docs(multimodal): plan MODEL-009-E / I154 agent-mediated read_image tool (#MODEL-009 #I154) (3470dbb)
• feat(conversation): add /attachments and /detach slash commands + attachment_count status (#MODEL-009-D #I152 #I153) (60a7064)
• fix(multimodal): owner rework R3-R6 — capability gate, real decode, TOCTOU, doc honesty (#MODEL-009 #I151 #I152) (52068ee)
• fix(engine): stop consuming attachments in display path + add bridge integration tests (#MODEL-009-D) (da94bb7)
• fix(agent): connect multimodal pipeline through session actor to provider (#MODEL-009-D #I152) (77b527f)
• fix(engine): connect image attachment pipeline end-to-end (#MODEL-009-D #I152) (961795d)
• feat(tui): add /attach command for image attachment (#MODEL-009-D #I152) (19391fc)
• feat(cli): add create_image_content_part public entry point (#MODEL-009-C #I151) ([d614179](d614179609864705...

v0.4.0

Changes since v0.3.9

• chore(workspace): release v0.4.0 (#I142) (fa276fd)
• fix(tui): remediate multiline composer acceptance (#TUI-032) (84a894a)
• feat(tui): I142 — TUI-025 composer multiline wrap (auto-wrap + Shift+Enter + height cap) (#I142) (b5c952f)
• docs(readme): bump release version reference v0.3.5 → v0.3.9 (#RELEASE) (65aa405)

Compare: v0.3.9...v0.4.0

Downloads

Platform	Architecture	File
Linux	x86_64	talos-x86_64-linux.tar.gz
Linux	ARM64	talos-aarch64-linux.tar.gz
macOS	Apple Silicon	talos-aarch64-darwin.tar.gz
macOS	Intel	talos-x86_64-darwin.tar.gz
Windows	x86_64	talos-x86_64-windows.zip

Checksums: checksum.sha256

Install

# macOS / Linux
curl -fsSL https://raw.githubusercontent.com/wjhuang88/talos/v0.4.0/install/install.sh | sh

# Windows (PowerShell)
irm https://raw.githubusercontent.com/wjhuang88/talos/v0.4.0/install/install.ps1 | iex

Each archive contains a single talos (or talos.exe) binary.

v0.3.9

Changes since v0.3.8

• chore(workspace): release v0.3.9 — MODEL-007 three-level variant picker + TUI-031 contextual status bar (#RELEASE) (348a881)
• feat(model): I141 — MODEL-007 three-level variant picker + TUI-031 contextual status bar (#I141) (b54c8a9)
• feat(model): ADR-048 variant representation — additive types for MODEL-007 (#MODEL-007) (4c4278a)
• docs(i139): mark Complete — v0.3.8 corrections committed, pushed, validated (#I139) (75d0bbc)

Compare: v0.3.8...v0.3.9

Downloads

Platform	Architecture	File
Linux	x86_64	talos-x86_64-linux.tar.gz
Linux	ARM64	talos-aarch64-linux.tar.gz
macOS	Apple Silicon	talos-aarch64-darwin.tar.gz
macOS	Intel	talos-x86_64-darwin.tar.gz
Windows	x86_64	talos-x86_64-windows.zip

Checksums: checksum.sha256

Install

# macOS / Linux
curl -fsSL https://raw.githubusercontent.com/wjhuang88/talos/v0.3.9/install/install.sh | sh

# Windows (PowerShell)
irm https://raw.githubusercontent.com/wjhuang88/talos/v0.3.9/install/install.ps1 | iex

Each archive contains a single talos (or talos.exe) binary.

v0.3.8

Changes since v0.3.7

• chore(workspace): release v0.3.8 — zstd compression, LazyLock cache, all tools external-path (#RELEASE) (d6309e8)
• fix(tools): wire all file tools to resolve_authorized_path for external access (#SEC-001) (48038db)
• chore: update Cargo.lock for zstd dependency addition (05b67c3)
• perf(config): LazyLock cache — decompress+deserialize ONCE, reuse forever (#PERF) (3cc978a)
• perf(config): switch to zstd compression — 53KB embedded (was 1.1MB raw, 73KB gzip) (#PERF) (8f18029)

Compare: v0.3.7...v0.3.8

Downloads

Platform	Architecture	File
Linux	x86_64	talos-x86_64-linux.tar.gz
Linux	ARM64	talos-aarch64-linux.tar.gz
macOS	Apple Silicon	talos-aarch64-darwin.tar.gz
macOS	Intel	talos-x86_64-darwin.tar.gz
Windows	x86_64	talos-x86_64-windows.zip

Checksums: checksum.sha256

Install

# macOS / Linux
curl -fsSL https://raw.githubusercontent.com/wjhuang88/talos/v0.3.8/install/install.sh | sh

# Windows (PowerShell)
irm https://raw.githubusercontent.com/wjhuang88/talos/v0.3.8/install/install.ps1 | iex

Each archive contains a single talos (or talos.exe) binary.