Local audit trail for every tool call an agent makes

Ingest tool-call events from the sample transcript format in the repo

Store them in SQLite with full-text search over arguments and results

Score risk with explicit rules (writes outside the repo, network calls, secrets in arguments) and show why

A local web UI: timeline, filter by risk, click into a call

Redact anything that looks like a token or key before it is stored

Diff two sessions of the same task and show where the agent took a different path

Requirements