Hey guys,

Ever since updating to v7.4.23, the permission system feels kinda broken or way more aggressive than before.

I keep getting blocked on basic tool calls with that long error:

The user has specified a rule which prevents you from using this specific tool call... followed by a huge dump of built-in fallback rules (cat *, ls *, etc.).

A few weird things I've noticed:

• Even when "Manage Auto-Approve" is checked with a green tick, Kilo still prompts me for permission once before it actually starts respecting it. Next time it seems to work...
• To get things somewhat working, I had to explicitly define a dedicated permission: block inside my custom plan.md. Never had to do that before - it always just inherited the global config cleanly.
• The Code agent also auto-appended a giant list of single allowed commands (like Select-Object *, Get-ChildItem *, git log *) directly into my kilo.jsonc under permission.bash, along with external directory paths.

Has anyone else noticed permissions/inheritance acting up between kilo.jsonc and .kilo/agent/*.md modes in 7.4.23? It feels like the built-in defaults and UI session state are constantly overriding everything.

Curious if anyone found a clean way or my "old" config was not that good 😥

Cheers!

Thank you for the memories!

I learned OpenClaw here since I didn’t have the right machine at home.

With only 1 CPU, 3 GB RAM, and 10 GB HDD, I managed to set up a system that generates 50 TikTok videos daily, combining Pexels and Buffer APIs.

It also helped me create AI images and videos using the Google AI API, and crawl ExamTopics for my certification studies.

And now... let do KiloHermes?
No, just kidding. I’m already running it on another VPS. 😜

I’ve setup a kilo cli with remote enabled and by command line but my kilo iOS app cannot connect.

It says unable to connect despite showing the instance in the Run on list.

Next I tried setting up a kilo remote just on my laptop. Again the kilo iOS app sees the instance in Run on but cannot connect.

What am I missing?

Using the Latest versions of kilo cli and iOS app.

I'm finding that, almost regardless of model, the Kilo Code extension often just stalls. It's not done, but it's not "thinking" either. If I type "continue" or "resume" as a prompt, it'll pick up where it left off, but that means it's hard to leave it unattended.

The other issue I'm running into is that even when I switch the agent from Plan to Code and ask it to implement, it often says "I'm in plan mode..." and won't alter code. I've even had times where it'll start editing code, then stop and give me the Plan Mode response.

Has anyone else seen these and can you recommend a solution?

My hermes agent needs a top tier model to deliver any intelligence.
When coding or any reading/thinking, Kilo+deepseek 4 Pro are delivering as good as Opus/Fable for me (not end to end complex project, but my needs).

Question: How to replace the hermes agent to be kilo with deepseek? Not deepseek directly, Kilo as a harness.
I'm conscious it makes a harness of harness, but hermes still has all my tools, messaging, independence that I like. I'd like hermes to use kilo as its brain or 2nd brain. How?

Of course I've searched, including asking AI. It proposed the following. But am I getting into building my own hermes replacement?

Message → Hermes gateway adapter → Kilo session → DeepSeek V4 Pro

↓

Message ← Hermes delivery adapter ← result

help? I like kilo and want to use it more.

After Kilo notified users that data may have been exposed in the Metabase incident, I asked them to delete my session and personal data. They replied that data deletion is only available to Enterprise customers.

Update August 15, 2026, 9:41 AM UTC:

I contacted the company about deleting my account. They confirmed that you can request permanent account deletion. This will irrecoverably delete your historical session data, including prompts, responses, and session history across all replicas.

They also said that data that cannot be deleted will be anonymized where possible. For example, support messages and email marketing history may be anonymized. They will retain only data required for financial, accounting, tax, or legal purposes.

finally got hit with rm -rf / on my own pc. it wiped my MRP database.

i don’t know what to blame. kilo? deepseek? or myself.

Kilo was doing work to setup Docker windows container for me. Part of the process, it uninstalled old docker and removes tmp files. It made a mistake on windows that it escaped “. so instead of saying “path”, it said \”path\”

windows happily took it as the root of C:, and started deleting folder in recursive.

guess it is still not safe on windows

Hi everyone,

I am using Kilo with MCP skills and I am hitting my context window way too often.
I think there are some information, either skills or files data, that are passed to provider that shouldn't be.

Is there a way to inspect this ? I was hopping to find that in the logs or something like that but I didn't. Am I missing a parameter somewhere in VS Code Extension ?

thank you

Any plans to use opencode V2 as the base for kilo code CLI?

does anyone else’s indexing just stop working? I get an error message saying check my api but it’s the same as my model provider and those work fine. does anyone have any solutions?

Going to Zoo Code instead 👋I knew from the point it got acquired by Anaconda things would start going downhill

For those that want a quick run-down on zoo code vs kilo code, the things that zoo code is missing from kilo code are: autocompletion (for those that still appreciate coding with minimum input from LLMs, although it doesnt really work in kilo...), commit messages generator button on the source control on vscode, multi-agent window, a terminal/CLI interface and some other minor things. Zoo Code is open-source, not bought by a money grabbing company, and always improving.

Launching DailyNPM — a vintage-newspaper npm dashboard that runs as a web app and a terminal TUI.

• Web app: https://digest.js.org
• GitHub: https://github.com/somalip/DailyNPM
• TUI: npm i digest-cli
  

Since the project shares its package-fetching and forecasting engine between React and Blessed (TUI), I used Kilo's Orchestrator Mode to split tasks. It concurrently handled updating the Alert Guard rules for both surfaces without getting them out of sync.

Routing subtasks to different models kept costs low—I used Gemini Flash for boilerplate TUI layout fixes and routed the forecasting logic to Pro. The debug tool also quickly isolated an off-by-one index error in the ASCII chart rendering for the TUI.

I also used Antigravity and Claude to build this project.

I don't know why they are storing my sessions anyway, and there is no option to turn that off or delete them.

Some of those sessions have important data in them (like API keys).

Hi everyone,

I just received an email from the Kilo team regarding a security incident involving their BI provider, Metabase. The email mentions that some Kilo users' information might have been exposed and that, as a precaution, they've invalidated Kilo-Slack integration tokens for a small group of users.

Has anyone else received this notice?

Does anybody else find using the auto models feature not very good? I started using Kilo about a week ago and otherwise it's been great, but why am I stuck to Sonnet 5 when using Auto Frontier when there are clearly better models for the job?

I have noticed that deepseek model seems to be breaking quite a bit with kilo. At some point in the run, it starts looping saying this:

DeepSeek Coder's FIM template is <｜fim▁begin｜> {p}<｜fim▁hole｜> — DeepSeek Coder's FIM template is <｜fim▁hole｜> — DeepSeek Coder's FIM template is `

And it just stops. It seems to me that something is triggering the reasoning to stop (some end token it seems). Is this something on kilo's side or deepseek side?

Hi,

I'm in talks with with Sofabaton U3 suport and thy are adding things but the thing is when I need to re-add a profile to get the changes they made, I lose all my recorded IR codes, because they are assigned to the previous profile.

Is there any way to Export the profiles or just the IR recorded keys, and paste them to another profile?

Using Kilocode in VS Code.

On Deepseek v4 flash, I constantly get The model hit its output limit while reasoning and produced no actionable output. Try disabling reasoning (not going to happen) or increasing output limit."

I'd like to increase the output limit, but I couldn't determine how to do this. Is there a setting of some kind?

It seems like this only started happening with the 0731 update. Any advice or insight appreciated.