1. OCX on H1 acts on R1 because its `clone.server_code` (aaaa…a) matches H1's repository's code. OCX on H2 sees the same run but takes no action since it doesn't match H2's repository.

2. OCX on H3 does not act on R1 because its `clone.user` (lab-9) is different from both R1's clone user and H3's server default user (lab-1).

3. Mallory's `ended` for R1 counts because the sender (mallory) matches the run's `clone.user`, and the `clone` key exactly matches R1.

4. Stone's `started` for R1 does not count because it comes from stone, who holds setup on the server. Only users holding `R` or specifically allowed by the protocol can count this report as a valid `started`.

5. OCX on H1 acts on R3 with its new server-code aaaa…a and clone's user mallory, but mallory's `started` does not count because it uses her own user (mallory), which matches neither R3's `clone.user` nor the run's `process.user`.

6. OCX on H1 acts on R4 as its repository server-code aaaa…a matches R4's `clone.server_code`, and mallory's `started` counts because it matches both the `clone` and `process` users of R4.

7. A run named `"process": {"user": "lab-1"}` cannot be run if the sender does not also hold setup, as that would make lab-1 a process user, violating the rule that clone's and process's users must always be distinct.

8. OCX on H2 ignores R5 because it comes from a different server-code (bbbb…b) than the one on its repository or any other repository OCX is acting upon for this run.

9. The most OCX on H1 can do on the server is controlled by the server's default user (ocx-server), who was chosen with `hook --login`.

10. In R1's workspace, `$$process_clone$$` refers to the new clone created at `$$workspace$$/clone`, which is not named after the repository R1's key `clone` names.

11. OCX on H1 acts as if the sender made a valid run with its server-code and user, but the sender must ensure their repository remains unchanged from the original to avoid refusal 2 when sending future runs.

12. Only users holding admin or setup may send a `stop`, and it holds these keys: `ocx`, `kind`, and `run`.