gitwtfhub

wtf is panoptes?

miggy-code/panoptes — explained in plain English

Analysis updated 2026-05-18

5PythonAudience · ops devopsComplexity · 3/5LicenseSetup · moderate

TL;DR

Panoptes records everything AI coding agents like Claude Code, Codex, and Hermes actually do, normalizes it into a searchable audit log, and can block risky actions with configurable policies.

Mindmap

mindmap
  root((panoptes))
    What it does
      Agent audit trail
      Universal event schema
      Policy based blocking
    Tech stack
      Python
      SQLite
      httpx and PyYAML
    Use cases
      Compliance audit logs
      Production access blocking
      Session timeline review
    Audience
      Platform engineers
      Security and ops teams

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

Why would anyone build with this?

REASON 1

Keep a searchable audit trail of every file read, shell command, and tool call an AI coding agent performs.

REASON 2

Write a YAML policy that automatically blocks an agent from touching anything tagged as production.

REASON 3

Reconstruct the full timeline and decision chain behind a specific agent action for a compliance review.

What's in the stack?

PythonSQLitehttpxPyYAML

How it stacks up

miggy-code/panoptes1ncendium/aibusteraaronmayeux/ha-hurricane-tracker
Stars555
LanguagePythonPythonPython
Setup difficultymoderatemoderateeasy
Complexity3/53/52/5
Audienceops devopsops devopsgeneral

Figures from each repo's GitHub metadata at analysis time.

How do you spin it up?

Difficulty · moderate Time to first run · 30min

Requires Python 3.10 or newer, capturing full traffic needs the proxy set as the agent's HTTP_PROXY.

Apache 2.0: use, modify, and distribute freely, including commercially, as long as you keep the license notice.

Wtf does this do

Panoptes is a tool for watching what AI coding agents actually do and keeping a record of it. As companies let agents like Claude Code, OpenAI Codex, Google Antigravity, Cursor, and a project called Hermes Agent run shell commands, read files, and touch production systems, it becomes hard to answer simple questions afterward, such as what an agent did yesterday or whether it touched production credentials. Panoptes solves this by capturing every tool call, file read, and shell command an agent performs and storing it in one searchable log, no matter which agent framework produced it. Each supported agent stores its activity in a different format, so Panoptes normalizes everything into one common event schema and saves it in a local SQLite database. It captures activity in two ways: by running as a proxy that sits between an agent and the internet and inspects its network traffic, or through a native plugin built specifically for the Hermes Agent that hooks directly into its internal events. Once activity is captured, a command line tool lets you check overall statistics, search for specific events, view a full timeline for one session, or trace the evidence behind any single recorded event. Beyond just recording activity, Panoptes includes a policy engine that can actively block risky actions before they happen. Policies are written as YAML files with conditions such as blocking any tool call that touches something tagged as production, and each policy can allow, warn about, or block a matching action. The project is under active development, written in Python, with the core proxy, storage, command line tool, and policy engine already built and tested, while a web dashboard is still planned. Installation works through pip or by cloning the repository from source, and it requires Python 3.10 or newer with very few external dependencies. It is released under the Apache 2.0 license.

Yoink these prompts

Prompt 1
Help me set up Panoptes as a proxy so it captures activity from Claude Code and Codex sessions.
Prompt 2
Write a Panoptes policy YAML file that blocks any agent tool call touching production configuration.
Prompt 3
Show me how to query Panoptes for every terminal command a specific agent session ran.
Prompt 4
Explain the difference between Panoptes' proxy capture method and the native Hermes plugin.

Frequently asked questions

wtf is panoptes?

Panoptes records everything AI coding agents like Claude Code, Codex, and Hermes actually do, normalizes it into a searchable audit log, and can block risky actions with configurable policies.

What language is panoptes written in?

Mainly Python. The stack also includes Python, SQLite, httpx.

What license does panoptes use?

Apache 2.0: use, modify, and distribute freely, including commercially, as long as you keep the license notice.

How hard is panoptes to set up?

Setup difficulty is rated moderate, with roughly 30min to a first successful run.

Who is panoptes for?

Mainly ops devops.

View the repo → Decode another repo

This repo across BitVibe Labs

Don't trust strangers blindly. Verify against the repo.