Run this in PowerShell on the target machine (signed in as the user). It installs the agent and registers the device.
—
Agent version & auto-update
Then “Push update” per device to upgrade now.
Uploaded agent is served from /assist/agent/download; devices self-update from there on push. New devices always get the latest from the enrollment command.
MegaMind prompt & tools
The loop runs on the gateway (Fable 5 / gpt-5.6-luna auto-router). Not n8n.
Retention
Stale devices are removed automatically when the fleet is viewed.
Command policy — deny list (floor)
One pattern per line. Any command containing a listed string is refused on every endpoint, on top of the tier classifier.