review-installation

Domain Q&A gate for the wrai.th installers — the curl-to-bash / iwr-to-PowerShell path that runs with a user's privileges on a machine that is not the author's, plus the Makefile, launchd/systemd service, and the install-smoke clean-room contract. Routes on a diff touching install.sh, install.ps1, install-smoke/, Makefile, com.agent-relay.plist, or scripts/. The checklist leads with supply-chain integrity and…