Occupy Any Machine
Your Mac is the command post. Windows is the front line. One command, and any bare machine falls in line.
irm https://agent-road.dev/install.ps1 | iexAI Doesn't Need Another Chat Window.
A fresh Windows install has nothing. No Git, no Node, no Python. Run one command and the environment grows itself — like a tardigrade, it lives wherever you drop it.
One Agent, Three Plays
Fix machines, harvest idle compute, ship across platforms — every machine you own should be working for you.
Mac Agent Controls a Windows Dev Machine
One agent on your Mac sets up, codes, and runs projects on a remote PC. You never touch the environment — it builds itself.
Turn Old Computers into AI Workers
Dusty old Macs, gaming PCs, that NAS in the closet — draft them all into your private compute network. One command to enlist.
Cross-Platform Development with One Agent
Code on Mac, test on Windows, deploy on Linux. One bridge, one agent, the whole line connected.
Machine Down, Team Dispatched
SSH dead, Tailscale down, agent unresponsive. Fine — Trauma Team runs three levels of response. Every way it can die has a path back.
Service down? The watchdog restarts it or rolls back to the last stable config. It's back before you noticed it was gone.
Regenerate SSH keys, reset the network stack, re-authenticate Tailscale — one command from the Mac, fixed remotely.
RustDesk unattended mode takes over the desktop directly. If the first two levels can't fix it, a human steps in.
Not Online or Offline — 8 States
Agent Road doesn't report "online" — that's useless. It tells you exactly what state the machine is in, what it can do, and what's missing. READY is the destination, not a state.
ENROLLINGEnrolling — command dispatched, Windows is growing its own environment
CONNECTED_SSH_ONLYSSH up, desktop asleep — commands work, mouse doesn't
GUI_LOGIN_REQUIREDNeeds a desktop login — the agent is waiting for one password
MCP_UNAVAILABLEDesktop control down — files and commands fine, GUI ops queued
TAILSCALE_AUTH_REQUIREDTailscale auth expired — re-authenticate and you're back
DEGRADED_RECOVERY_AVAILABLEPrimary link down, backup channel alive — recoverable
REBOOT_RECOVERY_FAILEDDidn't come back from reboot — Trauma Team Level 2 engaged
QUARANTINEDSecurity event triggered, machine locked down — held for your manual review
READYFull chain verified — commands, files, desktop, browser, all green
Boundaries, Not Promises
Single-Use Token
Enrollment tokens die in 10 minutes. One device, one shot, destroyed after.
No Long-Lived Secrets
No credential worth stealing lives in commands, logs, or process output.
Fail-Closed
Tailscale not running? Enrollment stops cold. No downgrade, no detour.
Pinned Host Keys
SSH host keys verified, then pinned. Man-in-the-middle gets refused on sight.
No Model on Target
Windows runs only lightweight control components. The model and the planning stay on your Mac.
Dangerous Ops Ask First
Bulk deletes, firewall changes, security software, external publishing — every one needs your explicit yes.
- ×Pre-boot recovery (BIOS / WinRE / BitLocker loops)
- ×Hardware failures (disk, memory, power)
- ×Organization-managed devices
- ×Cross-VPN relays and self-hosted VPS forwarding
Cold reboot. Transport recovery. Integrity preservation. Network isolation.
Not a slide-deck feature list — a test matrix run on real hardware: power-cycle reboots, network-cut recovery, file integrity checks, forced routing isolation. Every item physically verified.
Auto-reconnect after a normal reboot, zero manual steps
Encrypted channel rebuilds itself after a Tailscale drop
User files and existing configs untouched, verified by hash
LAN hard-blocked, traffic forced through Tailscale mesh only