Provisioned VM Image Preparation

Nucleic-Session: 28559516-7571-4295-A21C-28B0B95D9427
Co-authored-by: Nucleic <[email protected]>

docs/MACOS_VM.md

@@ -633,13 +633,13 @@ responsible process), which is the supported shape — but keep this in mind if
 
 ## 13. Limitations & future work
 
-1. **Base build/provisioning is one-click on macOS 27 — except the SIP toggle.** On a **macOS 27 host
-   + 27 guest**, **Build base image** now does the whole thing hands-off: install, declarative account
-   (`VZMacGuestProvisioningOptions`, §4.4), and toolchain + native-agent provisioning over SSH
-   (`MacVMEngine+Provision.swift`). The lone manual step is the one-time `csrutil disable` for
-   computer-use TCC grants (§12.5) — guided by the **Boot base in Recovery** button, after which a
-   second Build finishes it. On a **≤26 guest**, Setup Assistant still needs a human once (§4.2); after
-   the account exists the same SSH provisioning pass applies. 🟡
+1. **Base build/provisioning is one-click on macOS 27; SIP is never needed for the default path.** On a
+   **macOS 27 host + 27 guest**, **Build base image** does the whole thing hands-off: install,
+   declarative account (`VZMacGuestProvisioningOptions`, §4.4), and toolchain provisioning over SSH
+   (`MacVMEngine+Provision.swift`). **Computer use needs no SIP** — it runs host-side (§12.2). The only
+   thing that still wants `csrutil disable` is the **optional** semantic AX agent (§12.5), guided by the
+   **Boot base in Recovery** button. On a **≤26 guest**, Setup Assistant still needs a human once
+   (§4.2); after the account exists the same SSH provisioning pass applies. 🟡
 2. **~14 GB restore-image download** on first build unless a local `.ipsw` is supplied. One-time, but
    heavy. 🟡
 3. **The 2-concurrent-macOS-guest OS cap** (§10.1) is enforced from a configured default; the exact