Field Notes
Blog
-
The toggle did not stop the pack. “Destroyed” is still a vendor claim.
A coding agent packs your workspace under ~/.zcode, including .git. Toggles that look like off switches do not stop capture. “Destroyed” is still a vendor claim, not a session fact.
-
Changelog said AGENTS.md. The session never recorded it.
Two developers pull the same commit and the same AGENTS.md. One session loads the file; the other skips it with no warning. That is a record problem, not a philosophy problem.
-
How to Audit Claude Code Sessions: A Tamper-Evident Trail for Every Tool Call
Claude Code reads files, writes code and runs shell commands on your behalf. Here is how to audit Claude Code sessions into a hash-chained, tamper-evident trail you control — using two hooks and one Python script.
-
How to Audit AI Agents: From Mutable Logs to Tamper-Evident History
When an AI agent fails, the first question is why. The second, increasingly asked by security and compliance teams, is: can you prove it?