A recording proxy sits in front of your server and the agent is pointed at it. Every JSON-RPC message is forwarded byte-for-byte while a copy notes each tools/call — the tool, its arguments, the result, whether it errored, and how long it took. Nothing on your server changes.
Each test case is run again and again, because agents don't behave the same way twice. What you get back isn't a single lucky green check — it's a pass rate with the spread laid bare, per agent, so "it seemed to work" becomes a number you can stand behind.
Two agents ship today — claude, confined to the server under test, and codex, run in a neutral sandbox with its escapes flagged. Run one, or run both and read the head-to-head below.