What ran behind the reply? AEGIS for coding-agent activity on Windows

[antropos17]

What ran behind the reply? AEGIS puts observed local coding-agent activity into a Windows desktop workspace. Its agent catalog includes Codex CLI.

One useful investigation starts with a detected agent: inspect its process tree, follow related configured file activity and TCP endpoint views, then export audit evidence for a task review. Local security reviews also help inspect project, skill and profile configuration.

Simulated source UI, captured 11 October 2026.

AEGIS is free and MIT-licensed. The published release is 0.20.1-beta, with Windows as the primary platform and macOS/Linux experimental. Default monitoring observes activity; process actions are explicit, and selected-action policies/MCP gateways require separate setup.

Illustrated walkthrough · Source and downloads

For Windows Codex users, which process-to-file or process-to-endpoint connection would you most like to inspect after a long task? A reproducible workflow would help guide improvements.

Disclosure: shared on behalf of the AEGIS maintainer, with AI assistance.