Treat the trace as review evidence
Use the run profile to reconstruct how the agent reached the patch. Keep the source diff authoritative for code review and use AgentSight to expose the execution context the diff cannot contain.
Ask bounded questions
Did the agent run the relevant test? Did it retry after a failure? Did it read or write outside the stated scope? Did a network response or generated artifact affect the final patch? Each answer should point to recorded evidence.
Terminal
$ sudo agentsight record -- codex
$ agentsight report audit --json