Talamus

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  dev.py, line 39

  return subprocess.call(cmd, cwd=ROOT, env=_env())

  benchmarks/temporal_eval.py, line 312

  commit = subprocess.run(

  benchmarks/ask_eval/ontology_ablation.py, line 81

  shutil.rmtree(off_dir, ignore_errors=True)

  Show more

  benchmarks/ask_eval/timeout_llm.py, line 3

  Real finding: `subprocess.run(timeout=...)` does NOT reliably kill a hung

  benchmarks/longmemeval/runner.py, line 39

  completed = subprocess.run(

  benchmarks/shootout/report.py, line 14

  out = subprocess.run(

  scripts/talamus-session-hook.py, line 34

  diff = subprocess.run(

  scripts/talamus-session-hook.py, line 52

  subprocess.run(args, timeout=600)

  scripts/talamus-session-hook.py, line 57

  os.remove(diff_file)

  scripts/demo/run_magic.py, line 170

  result = subprocess.run(

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  src/talamus/sources.py, line 85

  with urllib.request.urlopen(request, timeout=30) as response: # noqa: S310 (user URL)

  src/talamus/adapters/llm.py, line 147

  with urllib.request.urlopen(request, timeout=120) as response:

  webui/src/api.ts, line 254

  const resp = await fetch(path, { headers: { "X-Talamus-UI": UI_TOKEN } });

  Show more

  webui/src/api.ts, line 260

  const resp = await fetch(path, {

  .github/workflows/publish.yml, line 330

  with urllib.request.urlopen(request, timeout=30) as response:

  .github/workflows/publish.yml, line 395

  with urllib.request.urlopen(request, timeout=30) as response:

  src/talamus/webapi/static/assets/index-BFHM89ps.js, line 1

  var vd=Object.defineProperty;var yd=(l,i,a)=>i in l?vd(l,i,{enumerable:!0,configurable:!0,writable:!0,value:a}):l[i]=a;var ke=(l,i,a)=>yd(l,typeof i!="symbol"?i+"":i,a);(function()

  src/talamus/webapi/static/assets/index-BFHM89ps.js, line 40

  `+s.stack}return{value:e,source:t,stack:o,digest:null}}function qi(e,t,n){return{value:e,source:null,stack:n??null,digest:t??null}}function Ji(e,t){try{console.error(t.value)}catch

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

  src/talamus/redact.py, line 5

  - *file-level*: secret-like files (``.env``, key material, credential stores) are

  src/talamus/redact.py, line 21

  ".env",

  src/talamus/redact.py, line 23

  ".netrc",

  Show more

  src/talamus/redact.py, line 24

  ".npmrc",

  src/talamus/redact.py, line 27

  "credentials.json",

  src/talamus/redact.py, line 34

  _SECRET_PREFIXES = ("id_rsa", "id_ed25519", "id_dsa", ".env.")

  src/talamus/vault_import.py, line 34

  vaults/repos (an imported/scanned tree could contain ``note.md -> ~/.ssh/id_ed25519``,

  src/talamus/adapters/llm.py, line 335

  key = os.environ.get("ANTHROPIC_API_KEY") or _stored_credential("anthropic_api_key")

  src/talamus/adapters/llm.py, line 358

  """Machine-level credential store: TALAMUS_HOME/credentials.json.

  src/talamus/services/readiness.py, line 199

  available = bool(os.environ.get("ANTHROPIC_API_KEY")) or _credential_present_safe(

  src/talamus/webapi/app.py, line 106

  ui_token = os.environ.get("TALAMUS_UI_TOKEN") or secrets.token_urlsafe(32)

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read. the file cap was reached before every file was read.

  OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED

  src/talamus/webapi/static/assets/index-BFHM89ps.js, line 1

  var vd=Object.defineProperty;var yd=(l,i,a)=>i in l?vd(l,i,{enumerable:!0,configurable:!0,writable:!0,value:a}):l[i]=a;var ke=(l,i,a)=>yd(l,typeof i!="symbol"?i+"":i,a);(function()

  webui/src/api.ts, line 1

  export type ServiceResult<T> = {

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit e5e14dabb488. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.

Date and source

Date checked: 21 Oct 2026

Read how this letter is chosen