Egress
Public redacted derivative transcribed from the recording; not a raw session transcript

Actual prompt (verbatim):
which apps on this Mac are talking to the internet right now, and what are they sending?

Observed-output excerpt (abridged):
For this capture only, the agent reported 16 live internet connections. It reported: "Sampled on this Mac at 02:17 UTC over a 10-second window with lsof and nettop, plus a 16-second connection scan. Nothing ran as root, so the sample sees destinations and volumes rather than contents." The answer presents process, destination and volume metadata, not payload contents.

Limits:
These are point-in-time observations from this capture, not continuous monitoring or blocking. The sample was collected without root and does not establish payload contents.

Take/date/environment:
Take 16:9-0641e05e; capture started 2026-10-24T02:15:04Z; desktop dev environment; real Superbot Helper 1.1.6-dev.60 (protocol 1).

Examination tools and versions:
lsof and nettop; both tool versions not recorded.

Finding film range (EDL output time):
00:09.355-00:18.373, spanning time-compressed answer assembly and the held observations.

Edit history:
Source 0.000-0.040 s was trimmed. A 160.766 s source wait was time-compressed into 1.200 s, with speed capped at 40x. The EDL represents the 177.979 s source take on an 18.373 s editorial timeline. The cut has a 16:9 reframe, wide window layout, bezel and captions. No redaction is applied in the delivered cut. The current final MP4 and poster were copied byte-for-byte without re-encoding.

Film filename + SHA256:
egress.mp4
64dbc42907a6af61b248c361f6e70826d3ece0aff89771e17b993cccd05c3e4b

Hashes compare public file bytes. They do not prove capture truth, authorship or legal chain of custody. Private originals remain private.