1. The host with the clone having server-code "aaaa...a" (H1) will have its OCX act on R1, as it matches the repository's server-code and default user specified in R1. H2's OCX will do nothing with R1 because the server-code and default user do not match.

2. OCX on H3 will not act on R1 because although the run names a server-code that matches one of its clones, the default user (lab-9) is different from the repository's default user (lab-1).

3. Yes, mallory's `ended` message counts. It must come from the repository's default user and match the repository and default user specified in R1.

4. OCX on H1 will act on R2 because it matches the server-code and default user specified in R2. zed's `started` does not count because it was sent by a user holding check-in capability (`i`) instead of admin or setup, and OCX cannot act on it as the repository's default user.

5. A run naming `"process": {"user": "lab-1"}` would not be allowed to run because `lab-1` is also the run's default user, and OCX does not allow processes to run under their own default user if they hold admin or setup capability.

6. The most that OCX on H1 can do on the server is set by whoever has that repository's command line. This choice affects the capabilities OCX can use when writing reports for the run.

7. `$$clone$$` refers to a directory where the clone operation will place the cloned files, and it is not the same as the repository named in the run's `repository`.

8. If H1's clone is deleted and made again with `fossil clone`, a new run naming the old server-code "aaaa...a" will be refused by OCX on any host because each clone gets its own unique server-code.

9. A run names `default_user` instead of OCX finding the user from the server-code to ensure that only an authorized user (the repository's owner) can send reports for that specific run, maintaining security and integrity.

10. Only a user holding admin or setup can send a `stop` for R1. The `stop` message must include the following keys: `ocx`, `kind`, and `run` (the run's hash in full).