Sandboxed Linux desktop as HELM tools.

Operational control plane: mouse, keyboard, browser, and screenshots exposed only through HELM over a sealed session — never a public drive-my-PC HTTP surface. You host the server on a VPS you control — see the VPS deploy guide.

Slots follow the dad-pitch ship-id convention: replace with screenshotsSHIP/<id>.png when marketing assets exist.

Operators who already chose the AiMANAC family posture: customer-owned backends, Apple-sale trust floor, no subscription rent on core workflows.