Installed current ToshLLM and Qwen assets on the W5500X Mac Pro, validated an anonymous payload byte-for-byte, and published one approved benchmark without personal data.

Changes

• Reconciled the managed Claude/Codex/Gemini/FLEET path blocks with the canonical rdmsm4x:/Users/richh/dev roots.
• Completed /Users/richh/dev_update.zsh; no outdated formulae remained. The only brew doctor warning is an existing unlinked Tailscale formula; it was not force-linked because /usr/local/bin/tailscale is the app wrapper and linking would conflict.
• Repaired the Antigravity cask receipt collision; backup: /Users/richh/.agent-coordination/backups/antigravity-cli-receipt-20260823T022649.
• Installed verified ToshLLM 0.85.7 and checksum-pinned Qwen 3.8 27B Q4_K_M, Q8 mmproj, and Q4 MTP files under /Users/richh/Library/Application Support/ToshLLM/models.
• Saved final Tosh settings with loopback/privacy controls (localNetworkDiscovery=false, apiKeyEnabled=false), Q4 model, W5500X GPU, 10 GPU layers, 24 threads, and Flash Attention off; backup: /Users/richh/.agent-coordination/backups/toshllm-settings-20260823T024312.

Benchmark and anonymous publication

• Local result: Qwen 3.8 27B Q4_K_M, median prompt 18.308 tok/s and generation 1.056 tok/s.
• The Tosh review alias was blank. The exact 6,715-byte JSON and 5,241-byte raw log were copied locally and scanned before submission.
• Privacy scan passed: no username, hostname, personal path, volume path, email, IP address, serial field, credential, chat/conversation content, or alias. Generated text and prompts were absent.
• Tosh returned Sent · app-recorded · approved. The private signing key remains in this Mac's Keychain and was not read, copied, or logged.

Permissions and undo

• TCC audit found explicit denials for SSH-wrapper-to-Terminal Automation and /bin/zsh Full Disk Access. The SSH Automation denial is intentional and should remain; it prevents broad remote GUI control.
• Restore settings from the dated backup if needed. Remove model files only after checksum review and an owner decision.
• If local interactive zsh workflows genuinely require protected-file access, enable Full Disk Access from this Mac's GUI; it was not required for the completed benchmark.