pando-ai 0.8.9 → 0.9.1

package/README.md

@@ -105,11 +105,17 @@ and the minimal runtime/toolchain paths needed to start common commands. Network
 is denied by default. There is no silent unsandboxed fallback for workspace
 mutation.
 
-Install-time security setup also provisions dedicated local users
-(`pando-workspace` and `pando-core`) and a root-owned helper daemon. The helper
-is intentionally narrow: it can only launch Pando's known roles for validated
-project roots over stdio. It is not a general command runner and does not accept
-custom argv, shells, or arbitrary commands.
+Install-time security setup provisions dedicated local users (`pando-ai-ws` and
+`pando-ai-core`), grants access to Pando's data root, and installs a root-owned
+helper daemon. It does not recursively ACL the shell's current directory, so the
+installer can be run from anywhere.
+
+On the first supervised launch from a project, Pando automatically configures
+that repo's tracked ACLs before starting Codex or Claude. There is no older
+direct MCP fallback in supervised mode: role-scoped MCP servers always start via
+the security helper. The helper is intentionally narrow: it can only launch
+Pando's known roles for validated project roots over stdio. It is not a general
+command runner and does not accept custom argv, shells, or arbitrary commands.
 
 The helper entrypoint is:
 
@@ -123,11 +129,11 @@ selects the role's dedicated user when privilege is available, starts the fixed
 Pando MCP server invocation, and lets the normal workspace sandbox apply before
 mutating tools are served.
 
-Security setup is normally invoked by install/uninstall, but can be run
-directly:
+Security setup is normally invoked by install and launch, but can be run
+directly for diagnostics or admin automation:
 
 ```bash
-pando-ai security setup-users
+pando-ai security setup-users --data-root ~/.pando-data --real-root /path/to/repo
 ```
 
 Diagnostics use the same JSONL log as the gateway and installer:
@@ -285,7 +291,7 @@ pando-ai serve [path]    # stdio MCP server for MCP clients
 pando-ai serve-http      # explicit HTTP MCP server for debugging/integrations
 pando-ai gateway         # run the firewall gateway in the foreground (debug)
 pando-ai proxy status|enable|disable [codex|claude]
-pando-ai security setup-users
+pando-ai security setup-users [--data-root <path>] [--real-root <path>]
 pando-ai security launch --role <core|workspace> --project-root <path> --stdio
 pando-ai login|logout|whoami
 pando-ai config set telemetry false