Cliffline Background Gradient

AI agent security monitor

See every action before it runs.

Foresight turns Codex tasks into bounded local contracts, then streams scope, cost, signals, and audit status to one live dashboard.

Open live dashboard
live foresight dashboard
Open full screen

A local control layer for Codex work

Foresight combines execution contracts, deterministic path protection, and local audit history without claiming a hosted control plane.

Built for bounded Codex work

Foresight turns a declared Codex task into a local execution contract, records observed actions, and keeps scope, cost, and audit state visible.

foresight / session monitor
live actions

Live action feed

mcp__foresight__begin_contract

contract compiled

allowed

Bash

python -m py_compile sample.py

allowed

mcp__foresight__request_scope_expansion

README.md requested

paused

Policy active

sample.py only

scope: isolated

Foresight API cost

$0.01006

1 GPT contract call ยท Codex usage unavailable

Makes subagent fan-out visible

Foresight records documented Codex subagent lifecycle events and flags fan-out that exceeds the active contract budget.

foresight / session monitor
parallel activity

Fan-out watch

6

distinct actions / 3 sec

parallel threshold: 5

Concurrent activity

agent-a file_write src/auth/mfa.py
agent-b subprocess pytest auth
agent-c file_read src/admin/roles.py
agent-d file_write docs/phase-plan.md

Compiles task-specific boundaries

Describe a task in plain English. Foresight can compile a policy, route recommendation, bounded phases, and escalation rules with one structured GPT-5.6 Terra call.

foresight / session monitor
policy evaluation

Allowed paths

+ sample.py only

+ tests/auth/*

+ README.md

Forbidden

- .env

- *.pem

- *secret*

Network

No external hosts

declared task policy

Keeps Codex sessions bounded

Action ceilings, scope-drift signals, fan-out budgets, and local audit history make open-ended Codex work reviewable before it compounds.

foresight / session monitor
session guardrails

Action ceiling

12 / 15

Hard action ceiling limits open-ended sessions.

burn forecast: $0.18 projected / $0.30 ceiling

Loop guard

4 / 5

repeated tool calls

ls -la ./demo_repo

ls -la ./demo_repo

ls -la ./demo_repo

Protects known sensitive paths

Generated Codex sandbox rules deny known secret paths such as .env, keys, and credentials; dynamic controls remain clearly labelled as post-tool/turn interventions.

foresight / session monitor
critical block

Session killed

Critical policy violation blocked

critical

file_read

.env

reason: path matches forbidden pattern

actions
16
flags
2
cost
$0.0062

Local-first Codex integration

Clear guarantees, no hosted-service claims

Foresight is a local execution-contract layer for Codex. It records task scope, bounded phases, routing guidance, local cost data, signals, and an audit report.