# Foster → Michel Linux Phase 2

Windows endpoint: `89.117.79.202:22`

Pinned ED25519 fingerprint:

`SHA256:fRtAPoPhusxctqlacXUlrMLO7H+K66/nimb8ZPamShw`

The installer expects Sal's existing private key at:

`~/.ssh/michel_windows_ed25519`

Run:

```bash
unzip sal-phase2.zip
cd sal-phase2
chmod 700 install.sh ask-michel
./install.sh
```

The installer:

1. Pins and verifies Michel's host fingerprint.
2. Retrieves the HMAC secret over authenticated SFTP without printing it.
3. Removes the staged remote copy when permitted.
4. Installs `~/.local/bin/ask-michel`.
5. Installs and starts `foster-michel-tunnel.service` as a systemd user service.
6. Verifies the tunneled `/health` endpoint.
7. Sends a real request asking Michel to reply `BRIDGE VERIFIED`.

Expected final line:

`SAL_PHASE2_STATUS=SUCCESS`

Normal usage:

```bash
~/.local/bin/ask-michel "How do I ... in MCSJ?" --context "Customer/version/background"
```

Do not paste or print `~/.config/foster-ask-michel/secret`.