AI agent security monitor
See every action before it runs.
Foresight turns Codex tasks into bounded local contracts, then streams scope, cost, signals, and audit status to one live dashboard.
Open live dashboardA local control layer for Codex work
Foresight combines execution contracts, deterministic path protection, and local audit history without claiming a hosted control plane.
Built for bounded Codex work
Foresight turns a declared Codex task into a local execution contract, records observed actions, and keeps scope, cost, and audit state visible.
Live action feed
file_write
src/auth/login.py
subprocess
pytest tests/auth
file_read
src/payments/charge.py
Policy active
src/auth/*
scope: isolated
Session cost
$0.0062
within predicted budget
Makes subagent fan-out visible
Foresight records documented Codex subagent lifecycle events and flags fan-out that exceeds the active contract budget.
Fan-out watch
6
distinct actions / 3 sec
parallel threshold: 5
Concurrent activity
Compiles task-specific boundaries
Describe a task in plain English. Foresight can compile a policy, route recommendation, bounded phases, and escalation rules with one structured GPT-5.6 Terra call.
Allowed paths
+ src/auth/*
+ tests/auth/*
+ README.md
Forbidden
- .env
- *.pem
- *secret*
Network
No external hosts
declared task policy
Keeps Codex sessions bounded
Action ceilings, scope-drift signals, fan-out budgets, and local audit history make open-ended Codex work reviewable before it compounds.
Action ceiling
12 / 15Hard action ceiling limits open-ended sessions.
Loop guard
4 / 5
repeated tool calls
ls -la ./demo_repo
ls -la ./demo_repo
ls -la ./demo_repo
Protects known sensitive paths
Generated Codex sandbox rules deny known secret paths such as .env, keys, and credentials; dynamic controls remain clearly labelled as post-tool/turn interventions.
Session killed
Critical policy violation blocked
file_read
.env
reason: path matches forbidden pattern
16
2
$0.0062
Local-first Codex integration
Clear guarantees, no hosted-service claims
Foresight is a local execution-contract layer for Codex. It records task scope, bounded phases, routing guidance, local cost data, signals, and an audit report.