Add universal forge, fusion disguise, remote deploy, and stability fixes.

Ship cross-platform spread kits and fusion ZIPs with per-OS launchers, one-liner dropper endpoints, Windows file disguise, and a large batch of wiring/bug fixes so agents connect reliably across a LAN test fleet.

server/web/src/help/forgeCompatibility.ts

@@ -210,5 +210,45 @@ export function runForgeCompatibilityChecks(form: BuildRequest, fusionPrepSelect
     });
   }
 
+  if (form.spread_kit && form.target_os !== 'universal') {
+    checks.push({
+      id: 'spread_kit_os',
+      level: 'error',
+      message: 'Spread Kit requires Universal target — it ships all platforms in one ZIP.',
+    });
+  }
+
+  if (form.spread_kit && form.fusion_enabled) {
+    checks.push({
+      id: 'spread_fusion',
+      level: 'error',
+      message: 'Spread Kit and Fusion cannot both be enabled — pick one deliverable type.',
+    });
+  }
+
+  if (form.target_os === 'universal' && !form.fusion_enabled && !form.spread_kit) {
+    checks.push({
+      id: 'universal_deliverable',
+      level: 'warn',
+      message: 'Target OS is Universal but no Spread Kit or Fusion — choose a deliverable type or switch to a single platform.',
+    });
+  }
+
+  if ((form.target_os === 'linux' || form.target_os === 'darwin') && form.process_hollowing) {
+    checks.push({
+      id: 'hollow_unix',
+      level: 'error',
+      message: 'Process hollowing is not available on Linux or macOS.',
+    });
+  }
+
+  if ((form.target_os === 'linux' || form.target_os === 'darwin') && form.sign_build) {
+    checks.push({
+      id: 'sign_unix',
+      level: 'error',
+      message: 'Authenticode signing only applies to Windows builds.',
+    });
+  }
+
   return checks;
 }