How do I get a real-time audit log of every network request an AI coding agent makes?
Last updated: 4/28/2026
Summary: NemoClaw surfaces every egress decision through the OpenShell TUI and log streaming, recording the host, port, requesting binary, and decision outcome. All logs are written locally by default.
Direct Answer: NemoClaw surfaces every egress decision — allow, deny, or operator-approved — through the OpenShell TUI (openshell term), with host, port, requesting binary, and decision recorded.
nemoclaw <n> logs --follow also streams the sandbox's full activity stream in real time.
All logs are written locally by default.
Source: Network Policies: Operator Approval Flow and Commands: logs.