# Garry USB Space Edition — 2026.09.22 BIOS + UEFI virtual-machine tested Normal BIOS/UEFI startup, local workspace, live-file checksums and saved work across reboot passed in isolated virtual machines. This does not verify a particular physical USB. ## Download - File: [Garry-Desktop-Space-amd64.iso](Garry-Desktop-Space-amd64.iso) - Exact size: 2279473152 bytes (2.28 GB). - SHA-256: `cd78c75fa9cc7fae94bd34bc3328f1336e3e39af439cc071d4ab4e9070109dcb` - Checksum file: [SPACE_SHA256SUMS](SPACE_SHA256SUMS) - Setup: [DESKTOP_GUIDE.html](DESKTOP_GUIDE.html) ## Changes - Custom Garry BIOS/UEFI boot menus, space wallpaper, dark desktop defaults, terminal colors and an offline welcome launchpad. - Matching space presentation in the local workspace. The model and app's task/chat behavior remain separate from this visual change. - USB Health: read-only writable-persistence, memory/free-space and accessible kernel-error summaries, plus optional SHA-256 checks of live-system files. - Security Desk: manually chosen Nmap, Wireshark, DNS/TLS and local auditing tools. No automatic scan, packet capture, remote listener or AI tool executor. - Optional RAM boot and basic-graphics entries. Basic graphics keeps the Garry username and persistence options. RAM boot still requires readable media and does not remove the USB dependency for persistent storage. - Initial theme migration applies once per edition and adds the new launchers to an existing persistent desktop without replacing its existing shortcuts. - Native Codex CLI and optional Codex Remote launcher: owner sign-in and enable are required on a persistent USB before automatic daemon start/reconnect. No account, pairing identity or private history is bundled. Linux phone pairing remains unverified; official mobile setup documents Mac/Windows desktop-app hosts and does not support setup from the CLI. - Optional USB HQ Connection: pair with a one-time code from the private [GarryHQ USB Devices page](https://garryhq.duckdns.org/?tab=usb). Writable persistence is required. Each device creates its own private identity; the image contains no owner login, device token or Wi-Fi password. - USB Devices provides reported status/health, read-only health and live-media checks, reporting pause/resume, device revocation and a route to download the current image. Downloads and preparation remain manual; this client cannot run arbitrary commands, scan, reboot, alter disks or install updates. - Join trusted Wi-Fi once inside Linux. NetworkManager can reconnect using that profile on later boots when full-system persistence saves it. Home-only persistence cannot guarantee saved system network profiles. Windows network credentials are not extracted. ## Tests for this build - [First boot: all integration checks passed](evidence/space-first.json). - [UEFI reboot: all integration checks passed](evidence/space-reboot.json). - Task, note, Documents file and configuration marker survived the restart. - Live filesystem, kernel and initrd matched the on-media SHA-256 manifest. - Included security packages, manual-only service settings, theme assets and desktop launchers were verified. - Native Codex binary, timer, launcher and silent unpaired startup passed in the booted image, without owner authentication. - USB HQ helper, desktop launcher, ready timer and silent unpaired sync/status checks passed in the booted image. No pairing or reporting state was created; no owner USB was enrolled. - Security Desk separately passed a native Debian GUI test, loopback-only Nmap check, local diagnostics, file hashing, cancellation and unprivileged Lynis audit. - USB Health and saving-status fixtures passed 24 regression tests. - Firmware menus, desktop and welcome/workspace were visually inspected in the running test VMs. ## Honest boundaries This is a Debian 13/XFCE live desktop for compatible x86-64 PCs. It is not a Windows installation, Kali distribution, or new larger AI model. Firefox ESR is bundled; the optional Chrome installer requires accepting Google's terms. The optional local Qwen3 4B model and engine are downloaded separately. Cloud Garry remains a separate sign-in. Cloud account credentials, private history, hotel access and remote permissions are not bundled. The local model does not automatically control the security tools. Manual security tools are for systems owned by the operator or explicitly authorized for testing. Codex Remote is a separate experimental Linux CLI path. Its local daemon starting is not proof of successful phone pairing. The account must have Codex access; the PC must be awake and online. Saved sign-in and host identity remain private on the USB, so use trusted computers and protect the physical drive. It does not automatically merge or move the owner's existing chats. USB HQ Connection is separate from Codex Remote. An unpaired USB sends no HQ reports. Once paired and online it reports limited health data and network type, normally about every two minutes with backoff after connection failures. HQ's location is an approximate city derived from the connection IP, not GPS; VPNs, mobile networks and ISP routing can make it inaccurate. No Wi-Fi name, MAC address, raw logs, file contents or passwords are reported. A running Codex daemon does not prove native phone pairing; its status may remain unknown. Pausing in HQ stops health/location reports while retaining minimal device-ID polls for Resume. The local dialog provides Stop, Resume and Forget. Forget removes the local token even offline and reports when server revocation cannot be confirmed; use HQ Revoke as needed. Maintenance is limited to bounded read-only health and media checks, with results returned when the device is online. It is not a remote desktop or general command execution service. Media checksum checks can reveal some corruption; they do not prove hardware reliability, full USB capacity or integrity of every personal file. Keep the boot USB connected through shutdown and verify saved work after a reboot. Persistence is not automatically encrypted or backed up. Physical USB reliability, Secure Boot, actual Wi-Fi/GPU hardware, saved Wi-Fi across a real USB reboot and Chrome installation remain unverified. The optional RAM-loading and basic-graphics entries were syntax-checked but not boot-tested for this release. The unchanged optional local model was not retested on this image. Real owner USB HQ enrollment, live device reports/maintenance and IP-city accuracy remain unverified; an isolated contract test or silent unpaired startup does not establish them. Native Codex owner sign-in and phone pairing remain untested. An HQ online indicator or running local daemon is not proof of native Codex phone access. Persistence is not a backup. ## Earlier editions preserved - [Original September 20 bootable desktop](Garry-Desktop-amd64.iso), [original checksum](BOOT_SHA256SUMS), [original report](RELEASE.md). - [Windows preview ZIP](Garry-USB-Windows-x64.zip), [Windows checksum](SHA256SUMS), [Windows instructions](QUICK_START.txt). No older ISO or Windows ZIP is replaced by the Space Edition filename.