Claude Code, Codex and Cursor read files, run commands and call tools with an engineer's access. ProofAgent attaches to a session started through the Runner and screens every intent on the device. Risky intents go to the workspace; everything else stays local.
Visibility, not enforcement
A live intent trajectory with tokens, risk and time ranges; secrets touched, data leaving and risky commands flagged as they happen. This is not endpoint-wide monitoring, and real-time blocking is planned, not shipped.