Another AI approves what your agent does
Claude Code and Cursor come set up so that a classifier model decides which actions go ahead, instead of asking you each time.
Claude Code · Cursor
What has changed
AI now works on your computer and in the cloud. See what it can do without asking your permission.
AI agents no longer just answer. They now read your files, run programs and act in services you use, like your email, your documents or GitHub.
Some do it without asking your permission.
Want the latest version right away? Download it from GitHub. Windows will show a warning because the program isn't signed yet. · How to check it's authentic
It's open source. RosmarOps only reads your configuration, and nothing leaves your computer unless you approve it.
Is it true?
What they do as they come installed
We checked them one by one, on the same reference computer, reading their code and their official documentation. It changes with every version, and we review it with each of ours.
One file in your project gives instructions to several agents at once
It's called AGENTS.md, and many agents read it. If one changes it, it changes what the others do.
Cursor · Codex · GitHub Copilot · Cline · Grok Build · Antigravity CLI
Claude Code and Hermes Agent also read it in some cases.
They search the internet without asking your permission
Web search comes turned on by default. A search can send out part of what the agent has read.
Gemini CLI · Grok Build
RosmarOps checks these nine: Claude Code · Cursor · GitHub Copilot in VS Code · Codex · Gemini CLI · Cline · Grok Build · Antigravity CLI · Hermes Agent. Do you use ChatGPT, Claude or Gemini in the browser? This is for you too. Go to your space
See each agent in the ObservatoryAnd on my computer?
What you see above is how they come. Yours may be different.
It depends on how you have set them up, on the keys stored on your computer and on the other agents you use. RosmarOps gives you a score for each agent, the first thing worth changing and how much it improves if you do.
Example · made-up computer
Antigravity CLI · ExposedFrom 0 to 100. The higher, the less exposed.
The first thing worth changing
Your Stripe key is saved in git
With the exact change, ready to copy and paste into your agent.
If you change it, the score goes up from 11 to 13
Three steps, a few minutes: download it and open it, with nothing to install and no account to create · it reads your configuration without changing anything · it tells you what to change, in order of importance.
See the full reportCan I trust it?
Three promises you can check
It only reads
It doesn't change your files or your agents. It tells you what to change, and you decide.
Nothing leaves without your permission
Without your permission it doesn't connect to anything. With it, it only sends your results, encrypted, to your space.
Open source
You can read the code. Every version comes with its checksum and an attestation of how it was built, so you can check that it's ours.
Start with your computer
Want the latest version right away? Download it from GitHub. Windows will show a warning because the program isn't signed yet.
Then follow how your score changes across all your computers: create your free space.
How we calculate the score: methodology. What it doesn't look at: limits.