Aimiru

What Aimiru cannot see

Aimiru can only stop what passes through it. Here is what it sees for each kind of agent, and what it cannot. Each agent's card in Aimiru shows the same sentences.

Coming: what you install for Claude Code, Codex, Cursor, OpenClaw, Hermes and other apps. Until it is out, each of them connects with its Aimiru Card, one page an agent reads to learn your rules, and Aimiru shows it as Advised.

  • Claude Code

    Advised

    Today it connects with its Aimiru Card and shows as Advised. Once what you install for it is out, Aimiru shows it as Enforced and covers what is below.

    Sees
    Aimiru checks each command and file change before it runs. Reads and changes inside your project are checked on your computer against your rules and sent to Aimiru within a minute, or, if Claude Code closes first, when it next starts. With Claude Code's sandbox on, the programs those commands start stay inside your project.
    Cannot see
    With it off, Aimiru asks before a program your agent just wrote runs, but cannot see what older programs do. Sessions started without plugins and cloud sessions skip Aimiru.

  • Codex

    Advised

    Today it connects with its Aimiru Card and shows as Advised. Once what you install for it is out, Aimiru shows it as Enforced and covers what is below.

    Sees
    Aimiru checks each command, file change and tool server call Codex makes before it runs. Reads and changes inside your project are checked on your computer against your rules and sent to Aimiru within a minute, or, if Codex closes first, when it next starts.
    Cannot see
    It cannot see Codex's own web search, work Codex does in the cloud, or what the programs those commands start do. Codex skips Aimiru's check until you trust it in Codex.

  • Cursor

    Advised

    Today it connects with its Aimiru Card and shows as Advised. Once what you install for it is out, Aimiru shows it as Enforced and covers what is below.

    Sees
    Aimiru holds the tools you add through Aimiru.
    Cannot see
    It does not hold Cursor's own commands or edits. Tools Cursor reaches some other way are not checked.

  • Other apps through the Aimiru connector

    Advised

    Today it connects with its Aimiru Card and shows as Advised. Once what you install for it is out, Aimiru shows it as Enforced and covers what is below.

    Sees
    Aimiru holds the tools your app reaches through Aimiru.
    Cannot see
    It cannot see what your app does any other way.

  • OpenClaw

    Advised

    Today it connects with its Aimiru Card and shows as Advised. Once what you install for it is out, Aimiru shows it as Enforced and covers what is below.

    Sees
    Aimiru checks each tool call and outbound message OpenClaw makes before it runs.
    Cannot see
    It cannot see work on cloud workers, tools the Claude command line runs itself, or a change another plugin makes after Aimiru checked.

  • Hermes

    Advised

    Today it connects with its Aimiru Card and shows as Advised. Once what you install for it is out, Aimiru shows it as Enforced and covers what is below.

    Sees
    Aimiru checks each tool call Hermes's model makes before it runs.
    Cannot see
    It cannot see tools that run inside the Codex runtime, or tools another plugin runs on its own.

  • Muse

    Advised
    Sees
    Aimiru sees what this agent checks with it.
    Cannot see
    It cannot see what it does elsewhere.

  • dots

    Advised
    Sees
    Aimiru sees what this agent checks with it.
    Cannot see
    It cannot see what it does elsewhere.

  • Fo

    Advised
    Sees
    Aimiru sees what this agent checks with it.
    Cannot see
    It cannot see what it does elsewhere.

  • Grok Bot

    Advised
    Sees
    Aimiru sees what this agent checks with it.
    Cannot see
    It cannot see what it does elsewhere.

  • Instinct

    Advised
    Sees
    Aimiru sees the email Instinct copies or forwards to your Aimiru address, after it is sent.
    Cannot see
    It cannot hold anything Instinct does, or see its texts, calls and sign-ins.

  • ChatGPT, Claude and agents you add yourself

    Advised
    Sees
    Aimiru sees what this agent checks with it.
    Cannot see
    It cannot see what it does elsewhere.

Capped Keys

  • A Capped Key stands in for a model key you pay by use. Aimiru stops what goes through the key, and nothing else. Capped Keys are coming.
  • A Claude or ChatGPT plan cannot be capped here. Only keys can.

How Aimiru says it

  • Each agent shows Enforced, Routed or Advised exactly as its connector delivers it. Enforced: Aimiru can stop it. Routed: Aimiru stops what goes through its Capped Key. Advised: it is only asked to check.
  • When a connector stops reporting, Aimiru shows that agent as Advised and its card says Aimiru's checks are off.
  • When Aimiru cannot be reached, agents Aimiru holds stop paying, sending, sharing, booking, deleting and signing in until it is back. Agents that only check with Aimiru are asked to wait.