for coding agents, i care less about sandbox branding and more about boring audit logs. what did it read, what did it write, and what was blocked?