How SightLine runs, who sees what, and what it keeps.
A plain account for your security and platform teams. Forward it freely.
Observe
Every action, by every agent.
A live feed of every turn across Claude Code and Codex: what was read, run and changed, by which developer, in which repo. Session replay, per-repo tree coverage and per-file history. A “needs attention” view surfaces denied calls, failed tests, upstream errors, risky commands, new MCP servers, unidentified sessions and flagged results.
sightline.yourcompany.com
SightLine
Search⌘K
Overview
Activity
Feed
Repos
Files
Govern
Alerts
Rules
Prove
Attribution
Indicators
People
Developers
Identities
Fleet
Setup
Connect
Audit
Access log
Health
Export
dana@yourcompany.com adminA brand of
ActivityFeedSession 7c41e2a9…4d2e
dana@yourcompany.com
Claude Code, 1 turn, 5 tool calls. Started 2026-10-08 14:02:11.
const days = end.diff(start, "day") + 1; // inclusive of the last day
testpnpm test --filter billingpassed
reveal output (1,032 bytes)
edit▸ .env.productionWriteblocked by Protected paths
14:02:58claude-sonnet-4-5in 18,240out 2,1068.4sreveal system prompt
Govern
Rules that alert or block.
Deny a command, protect a path, catch secrets sent to the model, alert on personal data sent to the model, and allow only approved MCP servers. Blocking rules are enforced on the developer’s machine, before the action runs, in Claude Code and Codex. Every rule change is audited.
Policy violations, grouped by rule and developer. Rules are not retroactive: an alert exists only for activity after its rule was created.
Show resolvedAll agentsClaude CodeCodex
Policy gates24 machines on the current policy.
Rule
Developer
Repo
Severity
Detail
Count
Last seen
Protected paths
dana
Claude Code
billing
critical
.env.production
8
1m ago
Resolve
Deny command
sam
Codex
infra
critical
git push --force
6
18m ago
Resolve
Secrets sent to the model
priya
Claude Code
web-app
critical
AWS access key
3
2h ago
Resolve
Personal data sent to the model
lee
Claude Code
support-tools
serious
customer email address
5
4h ago
Resolve
Approved MCP servers only
jordan
Codex
data-pipeline
warning
mcp: notion-export
2
7h ago
Resolve
Deny command
alex
Claude Code
infra
critical
terraform destroy
1
1d ago
Resolve
Prove
Line-level authorship for every commit.
Each commit’s lines are classified as written by AI, AI then edited, written by people, or carried over, and rolled up by developer, repo and model. Tool results are also checked for prompt-injection indicators. Attribution exports to CSV.
sightline.yourcompany.com
SightLine
Search⌘K
Overview
Activity
Feed
Repos
Files
Govern
Alerts
Rules
Prove
Attribution
Indicators
People
Developers
Identities
Fleet
Setup
Connect
Audit
Access log
Health
Export
dana@yourcompany.com adminA brand of
ProveAttribution
Prove
Every commit recorded while an agent was running in the checkout, with each added line traced to who wrote it: an AI model, a person, or a person editing what the model wrote.
All repositories24h7d30dCustomAll agentsClaude CodeCodexFor complianceFor engineering
How to read this pageShow
AI sharei31%57,040 of 184,000 lines seen; another 15% AI, then edited
Written by AIi31%57,040 lines
AI, then editedi15%27,600 lines
Written by peoplei48%88,320 lines
Carried overi6%11,040 lines
Commits recordedi2,140first on 2026-09-08
AI share by developer
dana@yourcompany.com
42%
priya@yourcompany.com
37%
sam@yourcompany.com
33%
lee@yourcompany.com
28%
jordan@yourcompany.com
24%
alex@yourcompany.com
19%
AI share by repository
web-app
39%
billing
32%
support-tools
29%
infra
22%
data-pipeline
20%
Commits
AIAI then editedPeopleCarried overNot seen
Commit
Repository
Author
When
Lines added
Who wrote iti
Evidencei
Fix proration bug in invoice totals8f3c2a91Claude Code
billing
fix-proration
dana
1m ago
18
AI 61% · AI then edited 22% · People 17%
Completei
Add audit fields to the refunds table41d07be5Codex
billing
refund-audit
priya
1h ago
96
Completei
Paginate the ticket search endpointc92e5f10Claude Code
support-tools
main
lee
3h ago
158
Completei
Tighten CSP headers on checkout0be6d4a7Claude Code
web-app
csp
sam
5h ago
41
Completei
Deployment
Hosted by Omega. A dedicated single-tenant instance: its own VM, its own database, its own org secret. TLS on every connection to the instance; daily disk snapshots.
In your cloud. The same deployment, installed by Omega in any cloud environment you run. SightLine’s records never leave your infrastructure.
Access
Sign-in goes through your company’s single sign-on (SSO). Admins see the whole organization. Lists never include content, and every time an admin opens someone else’s content, the view is logged. Rule, setup and identity changes go to append-only audit logs.
Data handling
What
Stored?
How long
Who can see it
Prompts
Stored, secrets scrubbed
30 days, then purged
Admins and the developer
Agent edits (text)
Stored, secrets scrubbed
30 days, then purged
Admins and the developer
Commands and tool calls
Stored
Command summaries kept; full inputs 30 days
Admins and the developer
Tool results
First 4 KB, secrets scrubbed
30 days, then purged
Admins and the developer
Repository file names
Stored (names only)
Kept
Admins and the developer
Commit metadata and line attribution
Stored, incl. message subject (never the line text)
Kept
Admins and the developer
Token counts
Stored
Kept
Admins and the developer
AI replies and reasoning
Not stored
n/a
n/a
Commit diffs
Not stored (analyzed in memory)
n/a
n/a
Retention defaults to 30 days and is configurable. Daily backups can hold content up to 7 days longer. Exports contain no prompts, file content, tool input or output, or commands.
Redaction and leak detection
Known secrets are scrubbed before storage: Anthropic, OpenAI, GitHub, GitLab, AWS, Google, Slack and Stripe live keys, JWTs and private keys. Redaction never changes what the agent sends to the model. Leak alerts also cover card numbers, US Social Security numbers and IBANs, and name the kind of data, never the value.
Encryption
Encrypted in transit and at rest. Connections to the instance use TLS, and stored data sits on encrypted cloud disks.
Supported agents
Claude Code and Codex today, with the full code features: commit attribution, file history and rules on the developer’s machine. Any AI agent your company runs can also run through SightLine for the same record, rules and audit trail. SightLine never stores the model’s replies.
