中文 · Download · MIT

AI coding agents write to disk far more than you'd guess.
ACDF sits in the notification area and helps you easily locate the culprit.

What it actually tells you

When the program keeps writing or scanning the disk, it will trigger an alarm.
The alarm will record the process, the rate, and how long this rate has persisted.
If the alerts from a certain program are too frequent and unnecessary, you can also add that program to the whitelist in the notification.

The byte count of the process is obtained from the kernel ETW, which is similar to the data obtained by the resource manager. However, we have separated the disk writing and disk scanning processes.

Where the bytes went

Ranking Totals per process over the last hour, day or week, kept across sessions.

Codex guardian A SQLite trigger turns the INSERTs into Codex's logs_*.sqlite into no-ops and counts what it swallowed. The state, goals and memories databases are never modified.

Settings

Global thresholds and individual app thresholds can be configured separately, each with its own duration window.
Want to focus on work? Silent mode will continue collecting and recording data as usual, but without showing notifications.

Install

Windows 10/11 and PowerShell are required:

irm https://raw.githubusercontent.com/FishBottle7/ACDF/master/get.ps1 | iex

That pulls the latest release into %LOCALAPPDATA%\Programs\ACDF and starts the wizard, which asks about history persistence and login autostart. Kernel-ETW attribution is on by default: one UAC prompt at install time, none afterwards (-NoEtwDisk opts out). Prefer manual? Unpack the zip from Releases, then pwsh -File Install.ps1. Either way, acdf.exe goes on your user PATH so the CLI works in any terminal, and Install.ps1 -Uninstall takes it all back out — processes, tasks, protocol, PATH entry, shortcuts and its own files. It asks before touching your data.

Build

cd rust
cargo build --release

rust/target/release then holds acdf-gui.exe (console + tray), acdf-daemon.exe (monitor), acdf.exe (CLI) and acdf-guardian.exe.

CLI

acdf is on your user PATH after install, so it works in any terminal:

acdf status
acdf whitelist add cursor.exe
acdf guardian on

Good to know

• Config, ranking and history live in %LOCALAPPDATA%\ACDF.
• Exact per-process bytes come from kernel ETW, which costs one UAC prompt at install time. Without it, ACDF falls back to performance counters.
• Windows 11 files every new tray icon into the hidden ^ flyout. Drag it onto the taskbar once and it stays.
• Build layout, icons and guardian details: rust/README.md.

Friends

  linux.do

License

MIT © 2026 FishBottle