Simplify runtime checks and MCP smokes

2026-06-25 09:19:26 -07:00
parent 99881b608b
commit 8da552bea1
13 changed files with 476 additions and 465 deletions
--- a/docs/security.md
+++ b/docs/security.md
@@ -6,6 +6,7 @@ Context Kit is designed to be safe by default for local development.

 - SearXNG is bound to `127.0.0.1` only.
 - No hosted API keys are required.
+- The web-search MCP image runs as the non-root `node` user.
 - Repomix mounts only the current project read-only.
 - Docs indexing stores data under `$HOME/.local/share/context-kit` unless you
  override it.