Local agent work should be inspectable before, during, and after the run.
No. Prompts, routing, embeddings, memories, workspace previews, graph results, and route-audit data stay on your Mac. Coil does not upload trace receipts or route-audit exports; it writes them only to the destination you choose. There is no cloud inference, Silo account, analytics, or telemetry; model weights are the only app-managed download and require consent.
Yes, after review and approval. Current App Store version 1.8.0 scopes Read, Write, Edit, read-only bounded shell, and graph queries to one folder you choose, under a policy selected for that run. Write and Edit show a bounded preview or diff, where relevant, before execution; full-content hashes force re-review if the file changes.
The current build shows the tool, bounded arguments, workspace-relative path, policy, and a file preview or diff where relevant. Full-content hashes protect a reviewed file from changing underneath the approval. Read-only bounded shell never becomes an unrestricted terminal.
The planned 1.9.0 update—not included in the current 1.8.0 download—will show a side-effect-free route preview with the proposed recipient and role, resident model, bounded context counts, bounded route reason, and a static list of seven available workspace-tool capabilities, not the tools this turn will run. Preview does not start generation, load a model, change transcript or memory, or run a tool.
The planned 1.9.0 update—not included in the current 1.8.0 download—will let you set route preview to Always, Only when ambiguous, or Never. When a preview is shown, accept it, cancel without dispatch, or choose another eligible model already resident on your Mac. Coil revalidates and reserves the exact selection before changing transcript or memory.
The planned 1.9.0 update—not included in the current 1.8.0 download—can export deterministic local route-audit JSONL. Depending on what was logged, the file may include turn text alongside the proposed route, user selection, and result. Coil writes an export only to the destination you choose and does not transmit it automatically. Review it before sharing.
Please do not attach private workspace files, prompts, trace receipts, or route-audit exports. Describe the visible state and we can help without receiving your content.