antropos17/Aegis

<p align="center"> <img src="docs/images/github-header.svg" width="720" alt="AEGIS — local AI agent monitoring"> </p>

Local AI-agent monitoring, security reviews and explicitly configured action controls.

Install · Use AEGIS · Current development · Documentation · Contribute

Windows beta: 0.19.2-beta, published 6 October 2026. Verify the installer · Beta readiness

Current source version: 0.19.2-beta <!-- x-release-please-version --> Later source work is described below. Installed builds contain the features at their release tag.

<a id="capabilities-at-a-glance"></a> <a id="what-aegis-observes"></a> <a id="monitor-first"></a> <a id="observe-your-agents"></a> <a id="review-before-use"></a> <a id="control-selected-actions"></a>

What AEGIS does

| Area | Coverage | | --- | --- | | Processes | 112 agents (265 process-name signatures), process trees, IDE-host and extension detection; Windows primary, macOS/Linux experimental | | Files | Changes in configured sensitive directories and agent config paths; Windows open-handle and Restart Manager observations | | Network | TCP endpoints for detected agent PIDs, endpoint names and allowlisted / unknown / flagged verdicts | | Behavior | 73 sensitive-path detection rules across 8 categories, rolling 10-session baselines, anomaly scoring and sequence evidence | | Resources and usage | CPU/RAM charts, local LLM probes, Claude Code token subtotals and estimated costs | | Runtime inventory | Running WSL distribution names and local Docker/Linux-native Podman candidates; explicit freshness, no guest process inspection | | Local review | Project, skill and profile inventory; static findings, saved snapshot comparison and offline report import | | Investigation | Agent instances, file/network v