Ballz2theWALL

Machine control / Dev6 source

Install.
Approve.
Turn ON.

Your agent. Your machine.
One deliberate switch.

Keep your existing agent and sign-in. The latest source adds command and file tools, a desktop MCP bridge, background jobs, and separately approved Windows administration.

Explore dev6 Download the published alpha

Source: 0.3.0a0.dev6 Owner acceptance pending
Downloads: v0.2.0a2 Mac experimental

Machine
access B2/W
LOCAL
OFF Saved settings

Enable JavaScript to try the switch.

Interactive preview — not connected to your machine

Local, not hosted.

Your sign-in stays yours.

Settings you can restore.

01 / In the latest source

Beyond runtime
settings.

0.3.0a0.dev6 · development candidate. These tools are implemented in the repository—not in the v0.2.0a2 downloads below. Live owner acceptance is still pending.

Command & file tools

Run explicit commands, read and write files, list directories and inspect the host. Access follows the launching account and the current ON session.

Desktop & browser MCP

A managed cua-driver bridge exposes desktop and browser tools over local stdio. Disposable-browser operation is demonstrated; signed-in sessions and physical Mac permissions still need acceptance.

Long-running jobs

Start a command, poll its status and output, then cancel when needed. Session-owned jobs can outlast a single tool-call timeout; timeout: 0 means no job deadline.

Approved Windows admin

A separate UAC-approved helper supports foreground commands and background jobs. Explicit retry handles pending approval. Real UAC and elevated-job acceptance remain pending.

Native agent connections

ON adds machine MCP to Hermes, Codex and supported local OpenClaw configurations. Claude Code connects on managed launches. OFF revokes access and restores saved configuration.

Saved candidate checks: source and installed wheel each 917 passed / 4 skipped; native Windows scope 241 passed / 1 skipped. These are earlier automated receipts—not live acceptance of this documentation update.

Changelog Capabilities & limits Evidence & pending checks

02 / The connections

Not another agent.
A switch for yours.

Ballz uses the agent CLI you already have. Dev6 adds machine MCP to supported native adapters. Your model, account and provider’s rules stay unchanged.

Hermes

Native approval controls. Local terminal and dev6 machine MCP.

--yolo
Adapter notes

OpenAI Codex

Native full-access mode. Existing sign-in and dev6 machine MCP.

--dangerously-bypass-approvals-and-sandbox
Adapter notes

Claude Code

Native permission mode. Dev6 machine MCP on managed launches; authenticated acceptance pending.

--dangerously-skip-permissions
Adapter notes

OpenClaw

Embedded local execution. Dev6 machine binding requires native schema and policy validation.

Default .openclaw home · Linux / WSL / Mac · no named profiles or remote nodes
Adapter notes

Bring an installed, signed-in agent. Ballz does not install the agent itself, migrate credentials, or restart existing gateways. A configured MCP binding is not proof of authenticated model execution; final dev6 agent acceptance is still pending.

03 / Published downloads

The published
runtime alpha.

v0.2.0a2 — native runtime settings only. These downloads do not include dev6 machine tools, desktop MCP or the admin helper. The guided installer handles its private Python environment; no Python, Git or Homebrew setup.

  1. Extract & install.

    Extract the entire ZIP. Double-click the installer for your platform.

  2. Approve & select.

    Review requested OS permissions. Choose your installed agent and profile.

  3. Turn ON. Start your agent.

    Installing alone changes no agent profile. ON is the explicit write action.

Guided installersv0.2.0a2 / alpha

Windows

.ZIP

Per-user installation. Open from Start.

For Hermes, Codex and Claude Code. OpenClaw users: install the wheel inside WSL instead.

Run Install-Windows.cmd

Download for Windows

No automatic Administrator access. Elevated work still requires its own approval.

Mac

Experimental

Terminal-based setup. Launch from Applications.

Run Install-Mac.command

Download for Mac

Physical Mac approval flow and Terminal permission attribution are not yet tested.

Read before installing

These are unsigned alpha packages, not signed or notarized applications. First install needs an internet connection. Windows x64 installation has been exercised; Windows ARM64 and physical Mac acceptance remain unverified.

Release files & checksums v0.2.0a2 installation guide

04 / Know the switch

More execution.
Not magic access.

OS permissions still apply. User access, approved Administrator access, and kernel or firmware control are different capabilities—not one blanket grant.

Does this control my whole desktop?

The dev6 source adds a local desktop/browser MCP bridge plus command and file tools. It is not unrestricted control of every OS layer: actual access depends on host permissions and driver support. Real signed-in browser use, final-candidate authenticated agent operation and physical Mac permissions remain unverified. The published v0.2.0a2 downloads only configure runtime settings.

What happens to my sign-in?

Your agent keeps its own OAuth or API authentication. Ballz does not copy credentials between runtime homes, create a hosted account, or log in a fresh profile for you. Select the agent profile you already use.

Is this a model-policy bypass?

No. These are native runtime execution controls, not a provider-policy bypass. Provider rules, organization policies, instruction-file guards, and tool availability still apply. OpenClaw ON changes its configured local tool allow/deny policy; OFF restores it. Changing a local setting does not change the model’s behavior or rules.

How does restoring settings work?

Ballz saves original configuration bytes and a local transaction receipt before applying settings. OFF uses the managed activation record to restore them. If files have changed since activation or receipts cannot be verified, restoration stops rather than overwriting newer edits. No task actions are undone.

What is still being verified?

Real Windows UAC and elevated-job cleanup, preservation of existing signed-in browser sessions, and a complete authenticated dev6 agent/tool/OFF round trip. Dependency redistribution review, final packaging and the normal downloaded-installer path also remain open. No new dev6 installer release is published.

Current verification scope
Is everything local and telemetry-free?

Ballz has no hosted account service. Its machine bridge is local stdio and its Windows admin helper uses local IPC; processes start when needed. Model providers and integrations may use the network. The desktop dependency has its own telemetry behavior, so dev6 is not advertised as telemetry-free. Full dependency review is pending.

Dependency and access notes
What is the Mac alpha limitation?

The macOS 11+ installer uses Terminal for setup and agent launch. You must approve requested permissions yourself. The physical approval flow and Terminal attribution have not been tested on a real Mac; existing daemons or unrelated background agents do not inherit those approvals. The package is not signed or notarized.

Read the verification record

No black box

Read it. Run it. Make it yours.

Open-source controller. MIT licensed. Current source: 0.3.0a0.dev6. No Ballz hosted account; dependency notices and release acceptance still in review.

View on GitHub