docs: address search entry review feedback

2026-07-08 20:56:27 +08:00
parent f531f1ce38
commit 1a21542d11
20 changed files with 329 additions and 287 deletions
@@ -61,7 +61,8 @@ process running for messages.

 - Bind local-only services to `127.0.0.1` unless you intentionally expose them.
 - Set an API key before binding the OpenAI-compatible API to a public interface.
- Keep `allowFrom` or pairing rules strict on every chat app.
+- Prefer pairing for DM-capable chat apps, and keep any static `allowFrom`
+  allowlists strict.
 - Enable `tools.restrictToWorkspace`; on Linux, use the bubblewrap sandbox for
  shell execution.