Written this session, never committed. Nothing in it is implemented; it is the research, with what could not be verified labelled as such. The finding worth keeping out of a transcript: a sandboxed Mac App Store Easel could only ever ship the `ac` bridge, because ac-electron's entitlements carry allow-unsigned-executable-memory and disable-library-validation and the sandbox rejects both. So the App Store and iOS are one decision, not two, and Developer ID direct is the only home the `claude` and `codex` bridges can have. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>