Starting the harness…
Choose a local passphrase of at least 16 characters (Unicode code points). It unlocks this device's store and cannot be reset; a password manager is encouraged.
Switching apps or locking the device screen may leave data-key, seed, account and machine authority unlocked in memory indefinitely. Permitted work, including already approved destructive actions such as a disk wipe, may run unseen. End is the kill switch; Lock pauses, and dormant sessions retain their machines. An already approved destructive action may run after reload or worker loss without a new tap. Already accepted remote work may continue after End. The phone may freeze or discard this page without a final callback.
The key stays in this worker's memory. App Lock, reload or worker loss clears it; re-enter it after unlocking. Switching apps retains it if the worker survives. Freezing aborts a request. Provider billing limits remain the provider's responsibility.
Key unset.
Use a dedicated, already verified provider account. This PoC uses an operator-supplied account rather than seed-based vendor recovery. It supports one purchase per store, external payment of the initial period, and published Ed25519 host keys. No stock or connectivity is promised.
Provider key unset.
App Lock, reload and worker loss clear the provider key. Re-enter the same account to resume the saved purchase.
The published pin comes from the provider’s hypervisor scan, rather than attestation. It trusts the provider and whoever can answer the machine address inside its network at scan time.
Registering the machine SSH public key at the provider does not enroll the relay. Copy the separate relay public key below and enroll it with your relay operator before configuration. Published pins and ordinary goal, class, access and declaration approvals are required by the existing runner.
This PoC supports one existing machine per fresh local store. Each machine name permanently binds these connection fields, pin, profile and elevation. To change them, use a fresh local store and a new name; keep the current store for its task history. Obtain the host fingerprint independently; a presented SSH key is never accepted here.
After enrollment, configure inference and Start session for the displayed model and machine and copy its public keys. Install the SSH line and enroll the relay public key separately. Set the bound session’s goal below. Accept the goal below with verification commands. Edit and propose the installation declaration candidate here, explicitly approve its requirements card, then Resume the task. Command admission requires that approval.