docs: address search entry review feedback

2026-07-08 20:56:27 +08:00
parent f531f1ce38
commit 1a21542d11
20 changed files with 329 additions and 287 deletions
@@ -60,7 +60,8 @@ sessions for longer work.
 ## Security notes

 - Do not store API keys directly in shared files; use environment variables.
- Keep chat app `allowFrom` lists narrow.
+- Prefer chat app pairing for first setup. Use `allowFrom` only for static
+  allowlists, and keep those lists narrow.
 - Enable workspace restriction before exposing file or shell tools to other
  users.
 - Use a separate workspace for experiments that can modify files.