Profile the task, not the whole workstation
Begin recording at the selected Codex command and stop with the task. This keeps the evidence easier to attribute and reduces unrelated local activity.
Pair the profile with the final diff
The diff remains the code-review surface. The AgentSight profile adds how the patch was produced, which tests actually ran, and which side effects deserve follow-up.
Terminal
$ sudo agentsight record -- codex
$ agentsight report audit --json