Install Proofpane.

One single-file binary (~13 MB). No dependencies, no installer wizard. The current macOS daemon release is Developer ID-signed and Apple-notarised; install it with the one-liner below.

Available for macOS Apple Silicon macOS Intel Linux x86_64 Windows x86_64

curl -fsSL https://app.proofpane.com/install.sh | bash

Per-platform release evidence

Run the same protected installer on every platform. The links in each tab expose the current channel’s SHA-256 sidecar for independent inspection; they are not a second, weaker installation path.

curl -fsSL https://app.proofpane.com/install.sh | bash
airgov_daemon --help

curl -fsSL https://app.proofpane.com/install.sh | bash
airgov_daemon --help

curl -fsSL https://app.proofpane.com/install.sh | bash
airgov_daemon --help

# Run from WSL or Git Bash:
curl -fsSL https://app.proofpane.com/install.sh | bash
airgov_daemon --help

In the Proofpane app: Devices → Pair new device → copy the 6-character code (valid for 5 minutes).

Then in your terminal:

AIRGOV_CLOUD_URL=https://api.proofpane.com \
  airgov_daemon pair J2W-UCF-LCL

You should see:

Pairing with https://api.proofpane.com
  Code: J2W-UCF-LCL
  Name: MacBookPro (Darwin)

Paired successfully.
  device_id: 831aecd2-dc82-4590-8b1a-a2e031d82108
  config:    /Users/yilu/.airgov/config.json

--- Auto-configuring detected MCP clients ---
Detected: Claude Desktop, Claude Code (CLI), Cursor, VS Code Copilot, Codex app
✓ Claude Desktop:    configured
✓ Claude Code (CLI): configured
✓ Cursor:            configured
✓ VS Code Copilot:   configured
✓ Codex app:         configured

✓ Pair + MCP client setup both done. Restart the apps above to pick up the new server.

The pair command auto-detects every supported MCP client and writes its config in the right shape (JSON / TOML / YAML). One-time setup, one command. The token in ~/.airgov/config.json is what authenticates every subsequent tool-call audit row.

Need to skip the auto MCP install? Add --no-auto-install-mcp to the pair command — you can run proofpane install-mcp separately later.

The pair step already wrote the proofpane entry into every detected client's config. Now just restart them so the changes take effect:

• Claude Desktop — Cmd+Q + reopen (reload window won't pick up MCP)
• Cursor / VS Code — Cmd+Shift+P → "Developer: Reload Window"
• Codex app — Cmd+Q + reopen
• Claude Code — no restart, next claude invocation picks it up
• Continue — reopen the side panel

Prefer to edit the config files yourself? The exact JSON / TOML / YAML the auto-installer writes is below — pick your client to see the snippet:

{
  "mcpServers": {
    "proofpane": {
      "command": "proofpane",
      "args": ["mcp"],
      "env": {
        "CP_VENDOR": "claude_desktop",
        "CP_AGENT":  "default"
      }
    }
  }
}

Name              proofpane
Transport         STDIO
Command to launch proofpane
Arguments         mcp
Environment vars  CP_VENDOR = codex_desktop
                  CP_AGENT  = default
Working directory (leave blank or set to project root)

{
  "mcpServers": {
    "proofpane": {
      "command": "proofpane",
      "args": ["mcp"],
      "env": {
        "CP_VENDOR": "cursor",
        "CP_AGENT":  "default"
      }
    }
  }
}

{
  "experimental": {
    "modelContextProtocolServers": [
      {
        "transport": {
          "type": "stdio",
          "command": "proofpane",
          "args": ["mcp"],
          "env": {
            "CP_VENDOR": "continue",
            "CP_AGENT":  "default"
          }
        }
      }
    ]
  }
}

In the app: MCP Setup → Agent Policies → New policy. Reasonable starter:

Agent name       default            (matches CP_AGENT)
Description      Dev workstation
Allowed paths    ~/projects/**
                 /tmp/**
Denied paths     ~/.ssh/**
                 ~/.aws/**
                 /etc/**
                 /var/log/**
Bash policy      ask                (HITL prompt for every bash)
Default decision deny               (catch-all: refuse the unknown)
Valid until      (blank = permanent)

Save. Tool calls into allowed paths execute immediately; bash routes through Slack / Tray HITL approval; everything else is denied with the matched rule recorded on the audit row.

In your AI client, ask:

What files are in the current directory?

Then open app.proofpane.com/agent-activity — the unified agent activity dashboard (MCP-native + broker traffic on one chain; filter by Source to slice). The By client + version card should show one row:

client            version           calls   denied
Codex             26.429.30905        1       0

That's the MCP initialize handshake's clientInfo flowing through. Every subsequent tool call increments calls; any policy denial increments denied. Six years from now, a regulator opens the Evidence Pack for this window and sees the same row, same hash, same answer.

Prefer to verify from the terminal? The daemon ships a one-shot health subcommand:

airgov_daemon health

Prints the resolved config path, the paired cloud URL, the device id, and a ready / not-ready line summarising reachability of the cloud control plane. Handy from CI / shell scripts.

For native-OS HITL approval pop-ups (when an agent hits a bash gate or a high-risk skill output): a small system-tray app that subscribes to your org's HITL queue and surfaces approve / deny prompts without context-switching.