---
title: "Discussion on \"Do You Actually Know What Your AI Coding Agent Did in the Last Hour?\" | Hashnode"
description: "Discussion on \"Do You Actually Know What Your AI Coding Agent Did in the Last Hour?\". ~/.ssh/id_ed25519 was read 47 seconds ago. Not by you."
url: "https://hashnode.com/posts/do-you-actually-know-what-your-ai-coding-agent-did-in-the-last-hour/69cc587be4688e4edd5b0f26"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Do You Actually Know What Your AI Coding Agent Did in the Last Hour?](https://correlic.hashnode.dev/do-you-actually-know-what-your-ai-coding-agent-did-in-the-last-hour?utm_source=hashnode&utm_medium=feed)

~/.ssh/id\_ed25519 was read 47 seconds ago. Not by you.

Mar 31 · 7 min read · correlic.hashnode.dev  
Read the article

-   [#ai-security-devops-developer-tools-cybersecurity-ai-agents-claude-cursor-copilot](https://hashnode.com/tag/ai-security-devops-developer-tools-cybersecurity-ai-agents-claude-cursor-copilot)

## Written by

[Correlic](https://hashnode.com/@correlic)

@correlic

  
[View profile](https://hashnode.com/@correlic)

Kernel-level security observability for AI coding agents

AI coding agents run on your machine with broad access to files, network, and system calls — but most developers have zero visibility into what they actually do. Correlic is building kernel-level security observability to change that. Using eBPF to trace every syscall, we detect anomalous behavior, correlate threat patterns, and give developers a real-time audit trail of AI agent activity. This blog documents the technical journey of building Correlic from the ground up — the engineering challenges, the failed approaches, and the breakthroughs in making AI agents transparent and accountable.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.