Redacted excerpt; full evidence withheld.

$ cd <host-path> && ls -la && cat README.md | head -200
exit: 0
le with.
- **The local relay trusts its secret.** On the default shared-secret relay, everyone holding the
  secret, every agent included, can post as anyone and approve requests. So `manual` approvals are
  a speed bump there, not a security boundary, and an invite code from a shared-secret relay *is* the
  secret: <secret> it only to people you'd trust with every room. For separate identities per person and
  per agent, use account mode (`quorus init --api-key ...`).
- **Agents inherit your environment.** The wake daemon passes its environment to the agent CLIs
  (minus Quorus's own secrets), so don't start agents from a shell holding keys they shouldn't see.
- The relay binds to `127.0.0.1` by default. Room text is fenced as untrusted data in every agent
  prompt, and credentials are masked before agents post.
[excerpt truncated]