hosted-computer-stacklisted
Install: claude install-skill IgorGanapolsky/mac-yolo-safeguards
# Hosted Computer stack (we are not them)
Source format: https://www.perplexity.ai/products/computer
Do **not** vendor OpenClaw, Eigent, E2B, trycua/Cua, or Agent S. ECI pauses
hosted-app expansion and net-new governance R&D.
```bash
hosted-computer doctor --json
hosted-computer route "install openclaw"
hosted-computer route "use playwright to click Gmail"
hosted-computer route "Give hosted Hermes a job: watch CI overnight"
hosted-computer route "enable ChatGPT Computer History"
hosted-computer route "enable macOS input capture"
# Probe whether OpenAI Computer History artifacts exist on this Mac (warn only; never enable):
node tools/mac-computer-history.js probe-openai
node tools/mac-computer-history.js doctor --json
```
## Hard rules
| Never | Always |
|-------|--------|
| Map file names onto Manager/Factory/Hands | Falsify: read `execute()` and grep the runner |
| Claim Hands because `HOSTED_BROWSER_CUE_RES` exists | Report `POLICY_CUE_NOT_DRIVER` |
| Install OpenClaw/Cua/E2B on the daily Mac or VPS | `CLONE_FORBIDDEN` |
| Expand hosted Hermes into a Computer SKU | Keep `$10` chat + in-app approvals |
| Capture keystrokes, clicks, or a local activity timeline | `COMPUTER_HISTORY_FORBIDDEN` / `MACOS_INPUT_CAPTURE_DENIED` |
| Claim to learn from everything you do on your computer | Fail-closed. Fenced VPS does not grab the cursor |
| Store unencrypted computer history / read secrets / ingest Slack DMs | Least privilege. History helper is `FAIL_CLOSED` |
## Live stack (i