#Agent transcripts

A coding agent writes a transcript of every session it runs, including prompts, tool calls, outputs. Heplon can analyze those transcripts to identify development friction. This page explains what is uploaded and who can see it.

To set it up, see Connect coding agents.

#Preconditions for uploading

A transcript is uploaded only when the workspace has a connector for that coding agent and the machine on which the coding agent runs (usually a developer's) has installed the heplon CLI.

#Only sessions in repositories connected to Heplon

The uploader reads the git remotes of the session's working directory and asks Heplon whether they match a repository it knows in its system graph. A session is uploaded only on a match. Sessions in a personal project, in a directory that is not a git repository, or in a repository Heplon has never seen, are skipped.

#Secrets and personal data scrubbing

Transcripts are scrubbed before they leave the machine by the local heplon CLI, and scrubbed again at ingest. Both sides run the same scrubbing rules. The scrubbing rules run locally and do not use LLMs.

Scrubbing covers credentials such as API keys and tokens, and personal data such as names and email addresses. It is thorough, but pattern-based and therefore not perfect.

#Pseudonymous storage

Each installation generates its own secret at install time and keeps it on the machine. Heplon stores a hash of it as the pseudonym with each uploaded transcript.

The pseudonym is stable, so sessions from one machine can be correlated with each other. Heplon holds no table mapping a pseudonym back to a person.

#A developer keeps control

From their own machine a developer can see what was uploaded and what was skipped (status), read their own pseudonym (whoami), export everything stored under it (export), and erase all of it (delete).

The file holding the secret is a credential. Copying it to another machine, or baking it into an image, hands that machine the developer's pseudonym along with the ability to erase their transcripts.

#Retention

Transcripts are kept for 90 days after upload and then deleted.