Regulated medical software expects traceability from requirement to implementation to verification. A coding agent inserts an author into that chain that your documentation has no field for. PromptWake records that author, so the trace stays unbroken.
No, and no tool should tell you otherwise about your own validation. It produces evidence that goes into your process; validating that process remains your responsibility.
Only if it is in your prompts. Capture is local by default, secrets are stripped before writing, and self-hosting keeps everything inside your own environment.
To the point the recorder was installed. Earlier code is reported as unknown rather than attributed, which is why starting before you need the evidence matters.