teleos CLI

The teleos launcher wraps the signed container. Everything runs on your machine. Your GitHub token comes from gh auth token (or GITHUB_TOKEN if set).

Command	What it does
teleos scan OWNER/REPO [--days N] [--json]	One-shot scan in a throwaway container; nothing installed
teleos up	Install and start a local instance in ~/.teleos and create the admin account
teleos status / logs / open / down	Manage the local instance
teleos upgrade	Move to the latest signed release
teleos doctor	Check Docker, gh, package access and release access; prints the fix for each
teleos sbom [--app] [--path]	This release’s bill of materials: the container (default) or source dependencies (--app); checksum-verified
teleos verify	Verify checksums, the signed checksums and the image signature with cosign
teleos version	Launcher and image versions

Environment: TELEOS_HOME (default ~/.teleos), TELEOS_VERSION (pin a release), TELEOS_IMAGE, TELEOS_REPO.

teleos scan --json (schema teleos.scan/v1)

Progress goes to stderr; stdout carries only the JSON.

{
  "schema": "teleos.scan/v1",
  "repo": "rails/rails",
  "window_days": 30,
  "generated_at": "2026-09-26T02:13:30+00:00",
  "teleos_version": "0.3.3",
  "signatures_version": "2026.09.25",
  "findings": ["14% of 137 merged changes carry an AI signal (19 assisted, 0 autonomous)."],
  "changes": {
    "merged": 137,
    "authors": 68,
    "ai_signal": {"none": 118, "assisted": 19, "autonomous": 0},
    "ai_actors": {},
    "bot_authors": {}
  },
  "ownership": {
    "codeowners_rules": 1,
    "vouched_by": {"merged_by": 137, "approved_by": 0, "domain_owner": 0, "declared_owner": 0, "unowned": 0},
    "landed_in_unowned_code": 137,
    "vouch_concentration": {"distinct_vouchers": 30, "top_n": 5, "top_n_share_pct": 69},
    "unvouched": []
  }
}

There are no ranked lists of named people: Teleos reports concentration, not leaderboards.