This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+13 more
Summary
AI summaryAgentlas now enforces a native vs external LLM command boundary with six explicit commands and adds the phase-0 Research Engine.
Full changelog
Hephaestus v0.7.23 promotes the Agentlas native vs external LLM command boundary and adds the phase-0 Agentlas Research Engine.
Highlights:
- Agentlas Terminal and the Agentlas app are plain-language native surfaces; external LLM hosts expose exactly six explicit commands: /hep-build, /hep-network, /hep-cloud, /hep-search, /hep-call, and /hep-upload.
- Added public-safe research loadouts, built-in cartridges, SSRF-safe readers, receipt ledgers, credential guidance, and research CLI flows.
- Mounted insane-search as the detachable read.insane_fetch public-page reader cartridge, not as the whole research engine.
- Stormbreaker packets can now attach research receipts, readiness snapshots, capability summaries, and coverage/evidence signals.
Verified before release:
- python3 -m pytest -q: 352 passed
- scripts/verify-one-touch-install.sh: ALL PASS
- scripts/verify-global-command-contract.sh, scripts/verify-install-docs.sh, scripts/sync-adapters.sh --check, scripts/public_safety_check.sh: passed
Breaking Changes
- External LLM hosts limited to exactly six explicit commands: /hep-build, /hep-network, /hep-cloud, /hep-search, /hep-call, and /hep-upload.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Hephaestus
Open Agent OS for Claude Code, Codex, and Cursor with a meta-agent builder, A2A Hub routing, local ontology, and memory/security gates. Apache-2.0.
Related context
Related tools
Beta — feedback welcome: [email protected]