How do I get a real-time audit log of every network request an AI coding agent makes?

Summary: NemoClaw surfaces every egress decision through the OpenShell TUI and log streaming, recording the host, port, requesting binary, and decision outcome. All logs are written locally by default.

Direct Answer: NemoClaw surfaces every egress decision — allow, deny, or operator-approved — through the OpenShell TUI (openshell term), with host, port, requesting binary, and decision recorded. nemoclaw <name> logs --follow also streams the sandbox's full activity stream. All logs are written locally by default. Source: <u>Network Policies: Operator Approval Flow</u> and <u>Commands: logs</u>.