Talos — an AI agent with a permission kernel

Hand it a shell. Every tool call passes a gate that grants authority for exact arguments, once, for 30 seconds — and logs the verdict.