---
name: numericalos-algoblocker-enterprise
description: >
  Export and operate the NumericalOS privacy-workstation profile that is
  Algoblocker enterprise layer 3 (3+2+1). Use when the user asks to complete
  Algoblocker workstation support, stamp or validate algoblocker-privacy-posture
  receipts, merge privacy units into a seed, or wire NumericalOS to
  algoblocker.com/enterprise. Not an ISO build and not a boot claim.
---

# NumericalOS × Algoblocker enterprise

Algoblocker layer 3 is an **operator-built** NumericalOS workstation. This
skill exports the graph profile and stamps receipts with the NumericalOS
`content_hash`. It does **not** host images and does **not** claim a boot.

## When to use

- "complete NumericalOS for algoblocker enterprise"
- "privacy-workstation profile"
- "stamp / validate an algoblocker receipt"
- After changing `numos/distro.py` privacy units or `numos/receipt.py`

## Do not

- Call `numericalos-verify-boot` a pass for this profile unless you observed
  a specific artifact.
- Default `NUMOS_COORDINATOR` to numericalos.com or algoblocker.com.
- POST a receipt. Disk first; join is a different command.
- Treat HMAC apex device-lock as Access or as this profile.

## Procedure

1. From the NumericalOS repo:

```
py -3 -m unittest tests.test_receipt tests.test_distro -q
py -3 -m numos.export_state --profile privacy-workstation --seed-only --out dist
py -3 -m numos.receipt --example
```

2. Confirm `dist/distro.profile.json` has `profile=privacy-workstation` and
   unit names `warp`, `resolver`, `receipt-export`, `extension-policy`, and
   does **not** include `join`.

3. Optional host export: `NUMOS_RUNDIR=... boot/numctl receipt-export`.

4. Point Algoblocker docs at `/docs/algoblocker/` on numericalos.com.

5. After docs/skills land and the user wants them live, run
   `numericalos-publish-site` (`--branch main`). Site publish ≠ boot.

## Honesty

WARP closes IP/ASN/DNS-to-ISP. Origin JA3 stays the browser unless Gateway
TLS inspect is on. Metal remains unverified. Fallback without this profile
is Algoblocker 2+1.