ranwhat: a flight recorder for AI coding agents

Field notes

The sample watch output groups findings by severity and shows the command associated with each event, including an SSH key read and an npm publish. The site says the watcher runs after the fact against files on disk, so it does not wrap the agent or sit in its execution path. For clean --apply, it describes writing a timestamped backup and parsing the edited transcript before replacing the original.