============================================================
  DISCLAIMER & USER AGREEMENT
============================================================

By proceeding, you acknowledge and agree to the following:

1. REMOTE CODE EXECUTION: The HPC daemon enables AI agents
   (via Claude Code by Anthropic) to execute shell commands on
   this machine. This includes reading, writing, moving, and
   deleting files, running programs, and submitting jobs.
   Commands run with YOUR user permissions.

2. DIRECTORY RESTRICTIONS: You will be asked to configure
   allowed working directories. This is the PRIMARY safeguard
   against unintended file modifications and data loss.

   - WITH restrictions: where the operating-system sandbox is
     available, it blocks all host-filesystem writes outside your
     chosen directories, regardless of the command or program.
     Reading and directory navigation remain available.
     On macOS, use $TMPDIR instead of hard-coded /tmp paths;
     host /tmp remains read-only unless explicitly approved.
     Setup asks what to do on a host where the sandbox cannot
     run. If you allow the daemon to run there, commands are
     checked only as text, which any program can write around.
   - WITHOUT restrictions: the agent can modify or delete ANY
     file your user account can access, including personal
     files, dotfiles, SSH keys, and project directories.

   Skipping restrictions may result in PERMANENT DATA LOSS.
   On personal computers, we strongly recommend using the
   default workspace directory.

3. SKILLS & INSTRUCTIONS: You are strongly encouraged to
   provide an HPC skill and server instructions during setup.
   Without adequate guidance, the AI agent may use incorrect
   commands, wrong partitions, or inappropriate paths.
   Insufficient configuration is at your own risk.

4. CREDENTIAL STORAGE: Your API key is stored locally in
   ~/.hpc_daemon/state.db. This file is restricted to your
   user account (mode 0600), but anyone with access to your
   Unix account can read it. Do NOT run this daemon on a
   shared account where other people can log in as your user.

5. NO WARRANTY: This software is provided as-is. Tiptree
   assumes no liability for data loss, job failures, or any
   other damage resulting from use of the HPC daemon.
