ActivityWatch

What it records

• window extent — carries a duration

  an app/window the user had focused; data.app, data.title. Runs of the same window are merged into focus spans.

What it can touch

The declared manifest — the sheet shown before install. Asking for more later means re-consent.

• Talks to 127.0.0.1:5600

  enforced — a sandbox wall, whatever the code tries