Add execution context to the diff
Record the generating run, then compare its test and file evidence with the final source change. This exposes missing validation and unexplained side effects without changing Codex itself.
Keep claims bounded by capture
A trace can show observed activity in the recorded scope. It cannot prove that unrecorded activity never occurred, and it does not replace source review.
Terminal
$ sudo agentsight record -- codex
$ agentsight report audit --json