Review scope, direction, and cause
Separate reads from writes and deletes, group project paths from external paths, and trace each important effect back to the process and agent phase that caused it.
Avoid turning path access into an automatic verdict
Build tools and agents legitimately use caches, temporary directories, and home configuration. Review whether each path was necessary and authorized, then reproduce suspicious behavior in a bounded run.
Terminal
$ sudo agentsight record -- codex
$ agentpprof --view files -o files.svg