Glossary
Terms used in these pages, explained in plain words.
/allow window
A time-boxed period with no prompts.
agent
The model plus the harness, acting through tools.
Allow Once
Approve this one call.
Allow Session
Approve similar non-HIGH calls until reset or restart.
allow-list
The list of user ids that may use the bot.
Always Allow
Approve one exact command from now on.
approval gate
The check that stops risky actions until the owner presses a button.
builtin sandbox
The default sandbox: a subprocess with limits.
content guard
The check that flags injection-like text.
context compressor
The step that shortens long history.
CRON_SAFE tools
The read-only tools scheduled jobs may use.
embeddings
Numbers that capture the meaning of text.
episodic log
A dated, append-only list of events.
escalation
Handing a task to the power model.
external sandbox
A sandbox server reached over HTTP.
fallback
The next model tried when one fails.
gateway
The part that talks to Telegram or Discord.
handoff
The package given to the power model.
hard block
A rule that refuses even when the owner would allow it.
harness
The code around a language model: chat adapters, tools, safety checks and memory.
kaizen
A Japanese word for steady, continuous improvement.
knowledge graph
Nodes and links between ideas.
manas
Sanskrit for mind or consciousness. Also the agent's short name.
MCP
Model Context Protocol, a way to connect tools. Not wired in here.
operator
The person who runs the server.
owner
The person on the allow-list who chats with the bot.
pending approval
A saved request waiting for a button.
placeholder
A name like {=NAME=} standing in for a secret.
process group
A set of related processes that can be stopped together.
progress line
A short live message about a tool call.
prompt injection
Text that tries to give the model new orders.
provider
The service that serves the model.
redaction
Replacing secret text in output.
rollback
Returning to the last good commit.
sandbox
A limited place to run code.
scheduled job
A saved prompt that runs on a timer.
secret vault
A file of named secrets filled in at run time.
session
One chat's history and state.
skill
A Markdown file of instructions the agent can load.
SSRF
Tricking a server into requesting private addresses.
Super Skill
The index of all skills.
supervisor
The process that runs the bot and watches for updates.
tier
A model level: small, medium or power.
tool
A function the model can ask the harness to run.
tool group
A set of tools switched on or off together.
vault folder
The folder of Markdown notes you can open in Obsidian.
vector search
Search by meaning using embeddings.
venv
A Python virtual environment.
Checked against the source at commit f4fd89f on 29 Oct 2026. Everything here is merged on the main branch; no release has been tagged yet. The source is private, so these pages are the public description.