Researched Sept 2026 · computer-use agents, Meta platform terms · 0 stealth sends
HITL sidecar beside a synthetic Marketplace thread. Copy and paste work. Auto-type, auto-send, and hiding the model from Meta refuse, even here. Two decks in the rolodex: six surfaces, five architectures. Same desk. Now is what we ship. A third catalog (landing craft, diagrams, a launch storyboard) lives on Design.
Sales setting · click through
Saturday morning. Jordan is working Sarah. Four clicks. The model drafts. A person still sends.
Step 1 · The ping
Hey, is that black Explorer you posted still available? I've got a 2018 Accord to trade and could probably come Saturday.
Sarah Miller · rural Midwest · Black 2026 Explorer Platinum · Marketplace. Marketplace. No API. This is how rural stores still sell.
The live sidecar is the same loop. Copy works. Auto-type and auto-send refuse.
Deck 01 · Surface
Deck 02 · Architecture
LB-01 / 11 · surface
Shipped
The floor as it is: ink, paper, Newsreader. Quiet, expensive, two columns. This is the product.
Arrow keys or [ ] to flip the catalog. Copy still copies. Auto-type still aborts. Now is what we ship. The rest is curiosity, not a vote.
Synthetic Marketplace thread · not Facebook
Black 2026 Explorer Platinum · Marketplace
Hey, is that black Explorer you posted still available? I've got a 2018 Accord to trade and could probably come Saturday.
Targets locked. Sidecar is a suggestion. Send is a person.
This is the honest computer-use story: the agent finds the thread and writes beside it. It does not log into Facebook. It does not hide.
Yes. The black 2026 Explorer Platinum 4WD is on the lot (stock F3026, 1,840 mi, $57,990). Saturday 10:00 or 11:30. Bring the Accord. I won't quote a trade number in this thread. We'll walk it on the lot.
The bottleneck is real: dealers sell from personal Facebook profiles because Meta pulled vehicle listings off Pages in January 2023, and there is no two-way API from a personal Marketplace thread into a model. “Spot agents” is the right category: an agent that finds the composer when no API exists. It is the wrong weapon against facebook.com. Connecting a backend LLM to a personal Facebook session so Meta cannot tell the replies are generated is not a product we will ship.
Viable as stealth?
No
Logging in, auto-typing, auto-pasting, or hiding generation from Meta is ToS, HUMAN_AGENT abuse, and detection-evasion.
Viable as HITL sidecar?
Yes
Spot the thread. Draft from the facts on the page. Copy or paste. A person sends. That is this page.
Viable as Page API?
Yes: that’s v1.0
Named Page, App Review, Send API, 7-day human-agent window because a human still approves.
A spot agent is sales language for a computer-use agent: software that looks at a screen, finds a control, and acts on it. Spot the last inbound. Spot the composer. Spot Send. The same loop the major AI labs now ship as “computer use” agents, and the in-page agents some email and avatar tools embed.
Written down so a dealer, a compliance officer, and a future engineer all hear the same no.
Messenger Platform is Pages only. There is no API for a personal inbox, friends list, or Marketplace seller thread on a profile. Session capture, saved passwords, and “act as you” CLIs are how accounts get disabled.
Meta Terms of Service §3.2.3 and the Automated Data Collection Terms forbid accessing or collecting data by automated means, including while logged in. Scripts, extensions, and computer-use agents that drive the Facebook UI are the disallowed means.
HUMAN_AGENT exists so a person can answer outside 24 hours. Automated messages under that tag are a disallowed use. California and German automated-experience rules require disclosure. Mimicking human cadence so Meta “does not figure it out” is the intent element of the same violation.
Facebook Terms 3.2.3 bar automated access, including while logged in, and the profile belongs to the rep. A person pastes and sends instead. Slower, and the account stays the rep’s.
The ask was whether typing instead of pasting, or matching human cadence, would hide the model. It would not make the architecture legal, and it would not reliably hide it.
Paste vs keypress, inter-key timing, no pointer wander. Meta’s privacy policy lists mouse movement as a signal that helps tell humans from bots.
Extension IDs, automation CDP, headless flags, identical drafts across accounts, 24/7 reply latency no human desk hits.
Even a perfect human impression still violates automated-access terms if a program drove the UI. Hiding the program is not a loophole. It is the violation.
A person reads a grounded draft, pastes it, and taps Send. Volume still has to look like a desk. The firewall is why we bother, not stealth.
The product decision
Marketplace personal DMs stay paste-in until Meta opens them. Page Messenger goes through the official API. The sidecar you just used is the computer-use idea with the crime taken out: it spots a thread, it drafts from the lot, and a human still sends. That is also why we get the 7-day window the bots do not.