diff --git a/README.md b/README.md
index 81d9206..ad2e662 100644
--- a/README.md
+++ b/README.md
@@ -1,7 +1,7 @@
-# Paseo — Agent Orchestration on the Home Lab
+# Paseo — Agent Orchestration, Native on .13
 
-**Multi-agent orchestration GUI (Paseo 0.7.2) self-hosted in Docker on `.13`, driving real pi
-coding agents (0.82.1) through OmniRoute.**
+**Multi-agent orchestration (Paseo 0.7.2) running as a native daemon on `.13` — driving the host's
+pi (0.82.1) with full filesystem access, LLM via OmniRoute.**
 
 > Maintained by Sam · Gitea — [sam/paseo](https://gitea.lab.audasmedia.com.au/sam/paseo) ·
 > interactive map: [maps.lab → Paseo](https://maps.lab.audasmedia.com.au/paseo/docs/system-map.html)
@@ -11,14 +11,17 @@ coding agents (0.82.1) through OmniRoute.**
 ## What it is
 
 [Paseo](https://github.com/getpaseo/paseo) is a client-server orchestration layer for AI coding
-agents: one **daemon** manages agent processes and streams their output to desktop, CLI, mobile and
-web clients. On this lab it runs **inside Docker on the always-on host `.13`**, with **pi** (the
-coding agent) baked into the image and LLM traffic routed through the existing **OmniRoute** proxy
-on `.13:20129`.
+agents: one **daemon** manages agent processes and streams output to CLI, web and mobile clients.
 
-- **Local-first** — agents run on our machines/dev environment; no telemetry.
-- **Pi is a first-class provider** — the daemon spawns `pi --mode rpc` (pi 0.82.1, no Nix changes).
-- **One console** — `paseo ls` / `attach` / `logs` from anywhere: `.27`, `.51`, mobile, web UI.
+On this lab it runs **natively on the always-on NixOS host `.13`** (no container): the daemon spawns
+the **host's own pi 0.82.1** (`pi --mode rpc`) as user `sam`, giving agents **direct access to the
+real filesystem** — projects, the Obsidian vault, photos — with the user's real permissions. LLM
+traffic routes through the existing **OmniRoute** proxy on `.13:20129`.
+
+- **Local-first** — no telemetry, no cloud dependency (Tailscale/LAN only).
+- **No sandbox** — this is deliberate: the daemon *is* `sam`. Guardrails come from pi's own
+  protections (filechanges, approvals), not a container boundary.
+- **One console** — `paseo ls` / `attach` / `logs` from .27, .51, and mobile web UI.
 
 ## Architecture
 
@@ -27,27 +30,25 @@ flowchart LR
     subgraph CLIENTS["Clients"]
         D27[".27 desktop<br/>paseo CLI"]
         D51[".51 laptop<br/>paseo CLI"]
-        M["Mobile / web UI<br/>browser"]
+        M["Mobile / web UI<br/>browser / Tailscale"]
     end
-    subgraph S13["Paseo daemon (.13 — Docker, always-on)"]
-        D["Paseo daemon 0.7.2<br/>:6767 · auth"]
-        PI["pi agent 0.82.1<br/>pi --mode rpc<br/>@earendil pi + omni ext"]
-        CFG["pi config<br/>/home/paseo/.pi"]
-        W["workspaces<br/>/workspace/demo"]
-        PWD["PASEO_PASSWORD<br/>.env (600)"]
+    subgraph N13["Native daemon on .13 (NixOS, always-on)"]
+        D["Paseo daemon 0.7.2<br/>systemd user service<br/>0.0.0.0:6767"]
+        PI["pi 0.82.1 (Nix)<br/>pi --mode rpc<br/>host ~/.pi + ~/.agents"]
+        FS[("Host filesystem as `sam`<br/>projects: ~/paseo/projects/<br/>obsidian vault, photos, /mnt/*")]
+        FW["NixOS firewall<br/>port 6767 open"]
     end
     subgraph LLM["LLM routing"]
-        OR["OmniRoute<br/>.13:20129"]
-        OP["OpenCode-Go /<br/>OpenRouter / DeepSeek / Gemini"]
+        OR["OmniRoute .13:20129"]
+        OP["OpenRouter / DeepSeek /<br/>OpenCode-Go (deferred)"]
     end
     D27 -->|"PASEO_HOST + password"| D
     D51 -->|"PASEO_HOST + password"| D
-    M -->|"https :6767"| D
-    D -->|"spawns / manages"| PI
-    PI -->|"reads settings + models"| CFG
-    PI -->|"works in"| W
-    D -->|"protects"| PWD
-    PI -->|"httpx /v1 (omni provider)"| OR
+    M -->|"Tailscale / LAN :6767"| D
+    D -->|"spawns / manages (no sandbox)"| PI
+    PI -->|"direct access, real permissions"| FS
+    D -.->|"listen allowed"| FW
+    PI -->|"omni provider /v1"| OR
     OR -->|"combo routing"| OP
 ```
 
@@ -68,70 +69,64 @@ paseo/
 ## Quick start (client)
 
 ```bash
-# .27 / .51 (one-time)
-npm install -g @getpaseo/cli@0.7.2
+npm install -g @getpaseo/cli@0.7.2          # one-time, per machine
 
-export PASEO_HOST=192.168.20.13:6767
-export PASEO_PASSWORD=<from .13: /home/sam/Docker/Containers/paseo/.env>
+export PASEO_HOST=192.168.20.13:6767        # or in ~/.config/environment.d/10-secrets.conf
+export PASEO_PASSWORD=<PASEO_PASSWORD>      # on .13's secrets file
 
 paseo status          # daemon reachable?
 paseo ls              # running agents
-paseo run --provider pi --model omni/openrouter/qwen/qwen3.7-flash \
-  --cwd /workspace/demo "describe this workspace"
+paseo run --provider pi "your task"         # defaults to combo model, cwd = your folder
 paseo logs <agent-id> # full activity timeline
 ```
 
-Web UI: `http://192.168.20.13:6767` (password). Mobile: browser over LAN/Tailscale.
+Web UI: `http://192.168.20.13:6767` (LAN) · `http://100.114.62.46:6767` (Tailscale/mobile).
 
 ## Deployment (server, `.13`)
 
 | Item | Value |
 |---|---|
-| Compose dir | `/home/sam/Docker/Containers/paseo/` |
-| Image | `ghcr.io/getpaseo/paseo:latest` + custom stage |
-| Daemon | 0.7.2 · `restart: always` · :6767 |
-| pi | `@earendil-works/pi-coding-agent@0.82.1` (baked, `--mode rpc`) |
-| Extensions | `omniroute-pi-ext-integration` (baked) |
-| Config | `./paseo-home:/home/paseo` (persists pi + paseo config) |
-| Workspace | `./workspace:/workspace` (agent project area) |
+| Daemon | Paseo 0.7.2 · **native** · systemd user service `paseo.service` · `0.0.0.0:6767`, enabled |
+| pi | Host Nix pi 0.82.1 (`/etc/profiles/per-user/sam/bin/pi`) — used directly via `--mode rpc` |
+| Config | `~/.paseo/` (daemon) · `~/.pi/` + `~/.agents/` (host pi, Gitea `pi-config` clone) |
+| Projects | `~/paseo/projects/<name>/` — real paths, direct FS access |
 | LLM | pi → omni provider → `http://192.168.20.13:20129/v1` (OmniRoute) |
-| Secrets | `.env` (chmod 600) — `PASEO_PASSWORD`, `OMNIROUTE_API_KEY` |
+| Firewall | `networking.firewall.allowedTCPPorts` includes **6767** (NixOS configuration.nix) |
+| Secrets | `PASEO_PASSWORD` in `.13` `~/.config/environment.d/10-secrets.conf` (chmod 600) |
 
-**Build note:** base image runs as user `paseo` (uid 1000) with root-owned `/usr/local` — so pi and
-the extension are installed at **build time** under `USER root` in the Dockerfile, then dropped back
-to `USER paseo` for runtime.
+**Start/stop/status:** `systemctl --user {start,stop,status} paseo` · logs: `journalctl --user -u paseo`.
 
-## Verified end-to-end (2026-09-09)
+## Verified end-to-end (2026-09-16)
 
 ```
-$ paseo run --provider pi --model omni/openrouter/qwen/qwen3.7-flash \
-    --cwd /workspace/demo --title paseo-demo --background \
-    "List files, read HELLO.txt, write DEMO_SUMMARY.md"
-
-AGENT ID  560ffca0-…  STATUS running  PROVIDER pi  CWD /workspace/demo
-   ↓
-AGENT ID  560ffca0-…  STATUS idle     PROVIDER pi/omni/openrouter/qwen/qwen3.7-flash
-   ↓ → wrote ./workspace/demo/DEMO_SUMMARY.md (correct content)
-   ↓ → `paseo logs` shows full timeline (user → thought → shell → read)
-   ↓ → web UI :6767 → HTTP 200
+$ paseo run --provider pi "…"                # bare run — model defaults to combo
+Model   omni/default-opencode-go-ds-flash    # healthy combo (OpenRouter → DeepSeek → OpenCode-Go)
+Cwd     /home/sam/paseo/projects/obsidian_cleanup_tool
+Status  idle ✅   (agent replied NATIVE_OK / NEWPATH_OK)
 ```
 
-## Known findings
+- Clients: .27 CLI · .51 CLI · mobile web UI all reach the daemon (LAN + Tailscale). ✅
+- Migration from the earlier Docker deployment completed; Docker removed (legacy backup in
+  `~/paseo/docker-legacy-backup-…`).
 
-- **OmniRoute combo regression:** the default `default-opencode-go-ds-flash` combo currently returns
-  `400 missing x-opencode-session` (OpenCode-Go leg) — affects host pi too, not just the container.
-  Working legs verified: `openrouter/qwen/qwen3.7-flash`, `openrouter/openai/gpt-5.6-sol`,
-  `aug/claude-haiku-4.5`. Fix the combo/credentials on OmniRoute to restore the default path.
-- Paseo is pre-1.0 (0.7.2) — pin the version; expect breaking changes between releases.
-- CLI runtime install on `.27` carries 3 low/medium CVEs in transitive deps (`qs`, `uuid`,
-  `@ai-sdk/provider-utils`) — vet/npq scanned clean, author verified.
+## Known notes
+
+- **Model default:** the pi model catalog was reordered so `default-opencode-go-ds-flash` is first
+  (bare `paseo run` picks it instead of a flaky free leg). If the combo's OpenCode-Go leg is
+  sub-rate-limited, the combo still falls back OpenRouter → DeepSeek.
+- **Skills:** the host pi (`~/.agents`) carries the full skill set (nixos-workflow, system-architect,
+  project-ops, obsidian-cli, etc.). Per-project `.pi/settings.json selects which are loaded.
+- **Security model:** native = full user permissions. Do not expose the daemon publicly; keep
+  LAN/Tailscale + password (no public Caddy vhost; use Paseo relay only if internet access is ever
+  required).
 
 ## Why it matters
 
-- **Proof the stack composes:** Nix pi binary stays untouched; the lab's OmniRoute routing powers a
-  third-party orchestrator; one always-on Docker host (.13) gives fleet control from any device.
-- **A pattern for multi-agent work:** workspaces + `pi --mode rpc` + OmniRoute is a base for
-  coordinating several pi agents on real projects — exactly the coordination layer the lab needs.
+- **Full-control autonomy: the daemon is `sam`, so agents manage real files (photos, vault,
+  projects) with no mount plumbing.
+- One always-on control plane for pi across all devices — the "phone control plane" use case.
+- n8n/Prefect email→agent workflows, scheduled runs, and browser tasks (pi-browser-harness) can be
+  layered on top.
 
 ---
 
diff --git a/docs/diagrams/system.png b/docs/diagrams/system.png
index c10fc12..aeb1f6e 100644
Binary files a/docs/diagrams/system.png and b/docs/diagrams/system.png differ
diff --git a/docs/diagrams/system.svg b/docs/diagrams/system.svg
index fc989d7..b978358 100644
--- a/docs/diagrams/system.svg
+++ b/docs/diagrams/system.svg
@@ -1 +1 @@
-<svg id="my-svg" width="100%" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" class="flowchart" style="max-width: 2019.14px; background-color: white;" viewBox="0 0 2019.140625 578" role="graphics-document document" aria-roledescription="flowchart-v2"><style>#my-svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#my-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#my-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#my-svg .error-icon{fill:#552222;}#my-svg .error-text{fill:#552222;stroke:#552222;}#my-svg .edge-thickness-normal{stroke-width:1px;}#my-svg .edge-thickness-thick{stroke-width:3.5px;}#my-svg .edge-pattern-solid{stroke-dasharray:0;}#my-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#my-svg .edge-pattern-dashed{stroke-dasharray:3;}#my-svg .edge-pattern-dotted{stroke-dasharray:2;}#my-svg .marker{fill:#333333;stroke:#333333;}#my-svg .marker.cross{stroke:#333333;}#my-svg svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#my-svg p{margin:0;}#my-svg .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#my-svg .cluster-label text{fill:#333;}#my-svg .cluster-label span{color:#333;}#my-svg .cluster-label span p{background-color:transparent;}#my-svg .label text,#my-svg span{fill:#333;color:#333;}#my-svg .node rect,#my-svg .node circle,#my-svg .node ellipse,#my-svg .node polygon,#my-svg .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#my-svg .rough-node .label text,#my-svg .node .label text,#my-svg .image-shape .label,#my-svg .icon-shape .label{text-anchor:middle;}#my-svg .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#my-svg .rough-node .label,#my-svg .node .label,#my-svg .image-shape .label,#my-svg .icon-shape .label{text-align:center;}#my-svg .node.clickable{cursor:pointer;}#my-svg .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#my-svg .arrowheadPath{fill:#333333;}#my-svg .edgePath .path{stroke:#333333;stroke-width:1px;}#my-svg .flowchart-link{stroke:#333333;fill:none;}#my-svg .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#my-svg .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#my-svg .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#my-svg .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#my-svg .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#my-svg .cluster text{fill:#333;}#my-svg .cluster span{color:#333;}#my-svg div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#my-svg .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#my-svg rect.text{fill:none;stroke-width:0;}#my-svg .icon-shape,#my-svg .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#my-svg .icon-shape p,#my-svg .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#my-svg .icon-shape .label rect,#my-svg .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#my-svg .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#my-svg .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#my-svg .node .neo-node{stroke:#9370DB;}#my-svg [data-look="neo"].node rect,#my-svg [data-look="neo"].cluster rect,#my-svg [data-look="neo"].node polygon{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg [data-look="neo"].swimlane.cluster rect{filter:none;}#my-svg [data-look="neo"].node path{stroke:#9370DB;stroke-width:1px;}#my-svg [data-look="neo"].node .outer-path{filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg [data-look="neo"].node .neo-line path{stroke:#9370DB;filter:none;}#my-svg [data-look="neo"].node circle{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg [data-look="neo"].node circle .state-start{fill:#000000;}#my-svg [data-look="neo"].icon-shape .icon{fill:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg [data-look="neo"].icon-shape .icon-neo path{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;}</style><g><marker id="my-svg_flowchart-v2-pointEnd" class="marker flowchart-v2" viewBox="0 0 10 10" refX="5" refY="5" markerUnits="userSpaceOnUse" markerWidth="8" markerHeight="8" orient="auto"><path d="M 0 0 L 10 5 L 0 10 z" class="arrowMarkerPath" style="stroke-width: 1; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-pointStart" class="marker flowchart-v2" viewBox="0 0 10 10" refX="4.5" refY="5" markerUnits="userSpaceOnUse" markerWidth="8" markerHeight="8" orient="auto"><path d="M 0 5 L 10 10 L 10 0 z" class="arrowMarkerPath" style="stroke-width: 1; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-pointEnd-margin" class="marker flowchart-v2" viewBox="0 0 11.5 14" refX="11.5" refY="7" markerUnits="userSpaceOnUse" markerWidth="10.5" markerHeight="14" orient="auto"><path d="M 0 0 L 11.5 7 L 0 14 z" class="arrowMarkerPath" style="stroke-width: 0; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-pointStart-margin" class="marker flowchart-v2" viewBox="0 0 11.5 14" refX="1" refY="7" markerUnits="userSpaceOnUse" markerWidth="11.5" markerHeight="14" orient="auto"><polygon points="0,7 11.5,14 11.5,0" class="arrowMarkerPath" style="stroke-width: 0; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-circleEnd" class="marker flowchart-v2" viewBox="0 0 10 10" refX="11" refY="5" markerUnits="userSpaceOnUse" markerWidth="11" markerHeight="11" orient="auto"><circle cx="5" cy="5" r="5" class="arrowMarkerPath" style="stroke-width: 1; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-circleStart" class="marker flowchart-v2" viewBox="0 0 10 10" refX="-1" refY="5" markerUnits="userSpaceOnUse" markerWidth="11" markerHeight="11" orient="auto"><circle cx="5" cy="5" r="5" class="arrowMarkerPath" style="stroke-width: 1; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-circleEnd-margin" class="marker flowchart-v2" viewBox="0 0 10 10" refY="5" refX="12.25" markerUnits="userSpaceOnUse" markerWidth="14" markerHeight="14" orient="auto"><circle cx="5" cy="5" r="5" class="arrowMarkerPath" style="stroke-width: 0; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-circleStart-margin" class="marker flowchart-v2" viewBox="0 0 10 10" refX="-2" refY="5" markerUnits="userSpaceOnUse" markerWidth="14" markerHeight="14" orient="auto"><circle cx="5" cy="5" r="5" class="arrowMarkerPath" style="stroke-width: 0; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-crossEnd" class="marker cross flowchart-v2" viewBox="0 0 11 11" refX="12" refY="5.2" markerUnits="userSpaceOnUse" markerWidth="11" markerHeight="11" orient="auto"><path d="M 1,1 l 9,9 M 10,1 l -9,9" class="arrowMarkerPath" style="stroke-width: 2; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-crossStart" class="marker cross flowchart-v2" viewBox="0 0 11 11" refX="-1" refY="5.2" markerUnits="userSpaceOnUse" markerWidth="11" markerHeight="11" orient="auto"><path d="M 1,1 l 9,9 M 10,1 l -9,9" class="arrowMarkerPath" style="stroke-width: 2; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-crossEnd-margin" class="marker cross flowchart-v2" viewBox="0 0 15 15" refX="17.7" refY="7.5" markerUnits="userSpaceOnUse" markerWidth="12" markerHeight="12" orient="auto"><path d="M 1,1 L 14,14 M 1,14 L 14,1" class="arrowMarkerPath" style="stroke-width: 2.5;"/></marker><marker id="my-svg_flowchart-v2-crossStart-margin" class="marker cross flowchart-v2" viewBox="0 0 15 15" refX="-3.5" refY="7.5" markerUnits="userSpaceOnUse" markerWidth="12" markerHeight="12" orient="auto"><path d="M 1,1 L 14,14 M 1,14 L 14,1" class="arrowMarkerPath" style="stroke-width: 2.5; stroke-dasharray: 1, 0;"/></marker><g class="root"><g class="clusters"><g class="cluster" id="my-svg-LLM" data-look="classic"><rect style="" x="1339.359375" y="8" width="671.78125" height="172"/><g class="cluster-label" transform="translate(1633, 8)"><foreignObject width="84.5" height="24"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5;"><span class="nodeLabel"><p>LLM routing</p></span></div></foreignObject></g></g><g class="cluster" id="my-svg-S13" data-look="classic"><rect style="" x="471.984375" y="200" width="1102.765625" height="366"/><g class="cluster-label" transform="translate(873.0703125, 200)"><foreignObject width="300.59375" height="24"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5;"><span class="nodeLabel"><p>Paseo daemon (.13 — Docker, always-on)</p></span></div></foreignObject></g></g><g class="cluster" id="my-svg-CLIENTS" data-look="classic"><rect style="" x="8" y="166" width="220.265625" height="404"/><g class="cluster-label" transform="translate(93.6796875, 166)"><foreignObject width="48.90625" height="24"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5;"><span class="nodeLabel"><p>Clients</p></span></div></foreignObject></g></g></g><g class="edgePaths"><path d="M189.5,240L195.961,240C202.422,240,215.344,240,242.115,240C268.885,240,309.505,240,350.125,240C390.745,240,431.365,240,466.132,254.363C500.899,268.727,529.813,297.454,544.271,311.817L558.728,326.181" id="my-svg-L_D27_D_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_D27_D_0" data-points="W3sieCI6MTg5LjUsInkiOjI0MH0seyJ4IjoyMjguMjY1NjI1LCJ5IjoyNDB9LHsieCI6MzUwLjEyNSwieSI6MjQwfSx7IngiOjQ3MS45ODQzNzUsInkiOjI0MH0seyJ4Ijo1NjEuNTY1NjEyNzkyOTY4OCwieSI6MzI5fV0=" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M184.602,368L191.879,368C199.156,368,213.711,368,241.298,368C268.885,368,309.505,368,350.125,368C390.745,368,431.365,368,455.174,368C478.984,368,485.984,368,489.484,368L492.984,368" id="my-svg-L_D51_D_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_D51_D_0" data-points="W3sieCI6MTg0LjYwMTU2MjUsInkiOjM2OH0seyJ4IjoyMjguMjY1NjI1LCJ5IjozNjh9LHsieCI6MzUwLjEyNSwieSI6MzY4fSx7IngiOjQ3MS45ODQzNzUsInkiOjM2OH0seyJ4Ijo0OTYuOTg0Mzc1LCJ5IjozNjh9XQ==" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M203.266,496L207.432,496C211.599,496,219.932,496,244.409,496C268.885,496,309.505,496,350.125,496C390.745,496,431.365,496,466.132,481.637C500.899,467.273,529.813,438.546,544.271,424.183L558.728,409.819" id="my-svg-L_M_D_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_M_D_0" data-points="W3sieCI6MjAzLjI2NTYyNSwieSI6NDk2fSx7IngiOjIyOC4yNjU2MjUsInkiOjQ5Nn0seyJ4IjozNTAuMTI1LCJ5Ijo0OTZ9LHsieCI6NDcxLjk4NDM3NSwieSI6NDk2fSx7IngiOjU2MS41NjU2MTI3OTI5Njg4LCJ5Ijo0MDd9XQ==" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M693.821,329L710.91,321.833C728,314.667,762.18,300.333,793.887,293.167C825.594,286,854.828,286,869.445,286L884.063,286" id="my-svg-L_D_PI_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_D_PI_0" data-points="W3sieCI6NjkzLjgyMDU5ODMyMzE3MDgsInkiOjMyOX0seyJ4Ijo3OTYuMzU5Mzc1LCJ5IjoyODZ9LHsieCI6ODg4LjA2MjUsInkiOjI4Nn1d" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M1116.844,286L1135.387,286C1153.93,286,1191.016,286,1228.102,286C1265.188,286,1302.273,286,1325.277,286C1348.281,286,1357.203,286,1361.664,286L1366.125,286" id="my-svg-L_PI_CFG_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_PI_CFG_0" data-points="W3sieCI6MTExNi44NDM3NSwieSI6Mjg2fSx7IngiOjEyMjguMTAxNTYyNSwieSI6Mjg2fSx7IngiOjEzMzkuMzU5Mzc1LCJ5IjoyODZ9LHsieCI6MTM3MC4xMjUsInkiOjI4Nn1d" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M1072.199,337L1098.183,356C1124.167,375,1176.134,413,1220.661,432C1265.188,451,1302.273,451,1324.316,451C1346.359,451,1353.359,451,1356.859,451L1360.359,451" id="my-svg-L_PI_W_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_PI_W_0" data-points="W3sieCI6MTA3Mi4xOTkwMDU2ODE4MTgsInkiOjMzN30seyJ4IjoxMjI4LjEwMTU2MjUsInkiOjQ1MX0seyJ4IjoxMzM5LjM1OTM3NSwieSI6NDUxfSx7IngiOjEzNjQuMzU5Mzc1LCJ5Ijo0NTF9XQ==" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M662.321,407L684.66,421.167C707,435.333,751.68,463.667,789.785,477.833C827.891,492,859.422,492,875.188,492L890.953,492" id="my-svg-L_D_PWD_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_D_PWD_0" data-points="W3sieCI6NjYyLjMyMDUwMTUxMjA5NjgsInkiOjQwN30seyJ4Ijo3OTYuMzU5Mzc1LCJ5Ijo0OTJ9LHsieCI6ODk0Ljk1MzEyNSwieSI6NDkyfV0=" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M1116.844,261.16L1135.387,257.133C1153.93,253.107,1191.016,245.053,1228.102,241.027C1265.188,237,1302.273,237,1334.659,220.181C1367.044,203.363,1394.729,169.726,1408.572,152.907L1422.414,136.088" id="my-svg-L_PI_OR_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_PI_OR_0" data-points="W3sieCI6MTExNi44NDM3NSwieSI6MjYxLjE1OTg1MTgxNTk0NzF9LHsieCI6MTIyOC4xMDE1NjI1LCJ5IjoyMzd9LHsieCI6MTMzOS4zNTkzNzUsInkiOjIzN30seyJ4IjoxNDI0Ljk1NTk2NTkwOTA5MSwieSI6MTMzfV0=" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M1527.516,94L1535.388,94C1543.26,94,1559.005,94,1579.493,94C1599.982,94,1625.214,94,1649.779,94C1674.344,94,1698.242,94,1710.191,94L1722.141,94" id="my-svg-L_OR_OP_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_OR_OP_0" data-points="W3sieCI6MTUyNy41MTU2MjUsInkiOjk0fSx7IngiOjE1NzQuNzUsInkiOjk0fSx7IngiOjE2NTAuNDQ1MzEyNSwieSI6OTR9LHsieCI6MTcyNi4xNDA2MjUsInkiOjk0fV0=" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/></g><g class="edgeLabels"><g class="edgeLabel" transform="translate(350.125, 240)"><g class="label" data-id="L_D27_D_0" transform="translate(-96.859375, -12)"><foreignObject width="193.71875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>PASEO_HOST + password</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(350.125, 368)"><g class="label" data-id="L_D51_D_0" transform="translate(-96.859375, -12)"><foreignObject width="193.71875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>PASEO_HOST + password</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(350.125, 496)"><g class="label" data-id="L_M_D_0" transform="translate(-39.5859375, -12)"><foreignObject width="79.171875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>https :6767</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(796.359375, 286)"><g class="label" data-id="L_D_PI_0" transform="translate(-66.703125, -12)"><foreignObject width="133.40625" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>spawns / manages</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(1228.1015625, 286)"><g class="label" data-id="L_PI_CFG_0" transform="translate(-84.7109375, -12)"><foreignObject width="169.421875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>reads settings + models</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(1228.1015625, 451)"><g class="label" data-id="L_PI_W_0" transform="translate(-29.34375, -12)"><foreignObject width="58.6875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>works in</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(796.359375, 492)"><g class="label" data-id="L_D_PWD_0" transform="translate(-28.4609375, -12)"><foreignObject width="56.921875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>protects</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(1228.1015625, 237)"><g class="label" data-id="L_PI_OR_0" transform="translate(-86.2578125, -12)"><foreignObject width="172.515625" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>httpx /v1 (omni provider)</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(1650.4453125, 94)"><g class="label" data-id="L_OR_OP_0" transform="translate(-50.6953125, -12)"><foreignObject width="101.390625" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>combo routing</p></span></div></foreignObject></g></g></g><g class="nodes"><g class="node default" id="my-svg-flowchart-D27-0" data-look="classic" transform="translate(118.1328125, 240)"><rect class="basic label-container" style="" x="-71.3671875" y="-39" width="142.734375" height="78"/><g class="label" style="" transform="translate(-41.3671875, -24)"><rect/><foreignObject width="82.734375" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>.27 desktop<br />paseo CLI</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-D51-1" data-look="classic" transform="translate(118.1328125, 368)"><rect class="basic label-container" style="" x="-66.46875" y="-39" width="132.9375" height="78"/><g class="label" style="" transform="translate(-36.46875, -24)"><rect/><foreignObject width="72.9375" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>.51 laptop<br />paseo CLI</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-M-2" data-look="classic" transform="translate(118.1328125, 496)"><rect class="basic label-container" style="" x="-85.1328125" y="-39" width="170.265625" height="78"/><g class="label" style="" transform="translate(-55.1328125, -24)"><rect/><foreignObject width="110.265625" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>Mobile / web UI<br />browser</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-D-3" data-look="classic" transform="translate(600.8203125, 368)"><rect class="basic label-container" style="" x="-103.8359375" y="-39" width="207.671875" height="78"/><g class="label" style="" transform="translate(-73.8359375, -24)"><rect/><foreignObject width="147.671875" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>Paseo daemon 0.7.2<br />:6767 · auth</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-PI-4" data-look="classic" transform="translate(1002.453125, 286)"><rect class="basic label-container" style="" x="-114.390625" y="-51" width="228.78125" height="102"/><g class="label" style="" transform="translate(-84.390625, -36)"><rect/><foreignObject width="168.78125" height="72"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>pi agent 0.82.1<br />pi --mode rpc<br />@earendil pi + omni ext</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-CFG-5" data-look="classic" transform="translate(1457.0546875, 286)"><rect class="basic label-container" style="" x="-86.9296875" y="-39" width="173.859375" height="78"/><g class="label" style="" transform="translate(-56.9296875, -24)"><rect/><foreignObject width="113.859375" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>pi config<br />/home/paseo/.pi</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-W-6" data-look="classic" transform="translate(1457.0546875, 451)"><rect class="basic label-container" style="" x="-92.6953125" y="-39" width="185.390625" height="78"/><g class="label" style="" transform="translate(-62.6953125, -24)"><rect/><foreignObject width="125.390625" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>workspaces<br />/workspace/demo</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-PWD-7" data-look="classic" transform="translate(1002.453125, 492)"><rect class="basic label-container" style="" x="-107.5" y="-39" width="215" height="78"/><g class="label" style="" transform="translate(-77.5, -24)"><rect/><foreignObject width="155" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>PASEO_PASSWORD<br />.env (600)</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-OR-8" data-look="classic" transform="translate(1457.0546875, 94)"><rect class="basic label-container" style="" x="-70.4609375" y="-39" width="140.921875" height="78"/><g class="label" style="" transform="translate(-40.4609375, -24)"><rect/><foreignObject width="80.921875" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>OmniRoute<br />.13:20129</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-OP-9" data-look="classic" transform="translate(1856.140625, 94)"><rect class="basic label-container" style="" x="-130" y="-51" width="260" height="102"/><g class="label" style="" transform="translate(-100, -36)"><rect/><foreignObject width="200" height="72"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table; white-space: break-spaces; line-height: 1.5; max-width: 200px; text-align: center; width: 200px;"><span class="nodeLabel"><p>OpenCode-Go /<br />OpenRouter / DeepSeek / Gemini</p></span></div></foreignObject></g></g></g></g></g><defs><filter id="my-svg-drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#000000"/></filter></defs><defs><filter id="my-svg-drop-shadow-small" height="150%" width="150%"><feDropShadow dx="2" dy="2" stdDeviation="0" flood-opacity="0.06" flood-color="#000000"/></filter></defs></svg>
\ No newline at end of file
+<svg id="my-svg" width="100%" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" class="flowchart" style="max-width: 2133.23px; background-color: white;" viewBox="0 0 2133.234375 560" role="graphics-document document" aria-roledescription="flowchart-v2"><style>#my-svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#my-svg .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#my-svg .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#my-svg .error-icon{fill:#552222;}#my-svg .error-text{fill:#552222;stroke:#552222;}#my-svg .edge-thickness-normal{stroke-width:1px;}#my-svg .edge-thickness-thick{stroke-width:3.5px;}#my-svg .edge-pattern-solid{stroke-dasharray:0;}#my-svg .edge-thickness-invisible{stroke-width:0;fill:none;}#my-svg .edge-pattern-dashed{stroke-dasharray:3;}#my-svg .edge-pattern-dotted{stroke-dasharray:2;}#my-svg .marker{fill:#333333;stroke:#333333;}#my-svg .marker.cross{stroke:#333333;}#my-svg svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#my-svg p{margin:0;}#my-svg .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#my-svg .cluster-label text{fill:#333;}#my-svg .cluster-label span{color:#333;}#my-svg .cluster-label span p{background-color:transparent;}#my-svg .label text,#my-svg span{fill:#333;color:#333;}#my-svg .node rect,#my-svg .node circle,#my-svg .node ellipse,#my-svg .node polygon,#my-svg .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#my-svg .rough-node .label text,#my-svg .node .label text,#my-svg .image-shape .label,#my-svg .icon-shape .label{text-anchor:middle;}#my-svg .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#my-svg .rough-node .label,#my-svg .node .label,#my-svg .image-shape .label,#my-svg .icon-shape .label{text-align:center;}#my-svg .node.clickable{cursor:pointer;}#my-svg .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#my-svg .arrowheadPath{fill:#333333;}#my-svg .edgePath .path{stroke:#333333;stroke-width:1px;}#my-svg .flowchart-link{stroke:#333333;fill:none;}#my-svg .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#my-svg .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#my-svg .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#my-svg .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#my-svg .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#my-svg .cluster text{fill:#333;}#my-svg .cluster span{color:#333;}#my-svg div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#my-svg .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#my-svg rect.text{fill:none;stroke-width:0;}#my-svg .icon-shape,#my-svg .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#my-svg .icon-shape p,#my-svg .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#my-svg .icon-shape .label rect,#my-svg .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#my-svg .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#my-svg .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#my-svg .node .neo-node{stroke:#9370DB;}#my-svg [data-look="neo"].node rect,#my-svg [data-look="neo"].cluster rect,#my-svg [data-look="neo"].node polygon{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg [data-look="neo"].swimlane.cluster rect{filter:none;}#my-svg [data-look="neo"].node path{stroke:#9370DB;stroke-width:1px;}#my-svg [data-look="neo"].node .outer-path{filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg [data-look="neo"].node .neo-line path{stroke:#9370DB;filter:none;}#my-svg [data-look="neo"].node circle{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg [data-look="neo"].node circle .state-start{fill:#000000;}#my-svg [data-look="neo"].icon-shape .icon{fill:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg [data-look="neo"].icon-shape .icon-neo path{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#my-svg :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;}</style><g><marker id="my-svg_flowchart-v2-pointEnd" class="marker flowchart-v2" viewBox="0 0 10 10" refX="5" refY="5" markerUnits="userSpaceOnUse" markerWidth="8" markerHeight="8" orient="auto"><path d="M 0 0 L 10 5 L 0 10 z" class="arrowMarkerPath" style="stroke-width: 1; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-pointStart" class="marker flowchart-v2" viewBox="0 0 10 10" refX="4.5" refY="5" markerUnits="userSpaceOnUse" markerWidth="8" markerHeight="8" orient="auto"><path d="M 0 5 L 10 10 L 10 0 z" class="arrowMarkerPath" style="stroke-width: 1; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-pointEnd-margin" class="marker flowchart-v2" viewBox="0 0 11.5 14" refX="11.5" refY="7" markerUnits="userSpaceOnUse" markerWidth="10.5" markerHeight="14" orient="auto"><path d="M 0 0 L 11.5 7 L 0 14 z" class="arrowMarkerPath" style="stroke-width: 0; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-pointStart-margin" class="marker flowchart-v2" viewBox="0 0 11.5 14" refX="1" refY="7" markerUnits="userSpaceOnUse" markerWidth="11.5" markerHeight="14" orient="auto"><polygon points="0,7 11.5,14 11.5,0" class="arrowMarkerPath" style="stroke-width: 0; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-circleEnd" class="marker flowchart-v2" viewBox="0 0 10 10" refX="11" refY="5" markerUnits="userSpaceOnUse" markerWidth="11" markerHeight="11" orient="auto"><circle cx="5" cy="5" r="5" class="arrowMarkerPath" style="stroke-width: 1; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-circleStart" class="marker flowchart-v2" viewBox="0 0 10 10" refX="-1" refY="5" markerUnits="userSpaceOnUse" markerWidth="11" markerHeight="11" orient="auto"><circle cx="5" cy="5" r="5" class="arrowMarkerPath" style="stroke-width: 1; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-circleEnd-margin" class="marker flowchart-v2" viewBox="0 0 10 10" refY="5" refX="12.25" markerUnits="userSpaceOnUse" markerWidth="14" markerHeight="14" orient="auto"><circle cx="5" cy="5" r="5" class="arrowMarkerPath" style="stroke-width: 0; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-circleStart-margin" class="marker flowchart-v2" viewBox="0 0 10 10" refX="-2" refY="5" markerUnits="userSpaceOnUse" markerWidth="14" markerHeight="14" orient="auto"><circle cx="5" cy="5" r="5" class="arrowMarkerPath" style="stroke-width: 0; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-crossEnd" class="marker cross flowchart-v2" viewBox="0 0 11 11" refX="12" refY="5.2" markerUnits="userSpaceOnUse" markerWidth="11" markerHeight="11" orient="auto"><path d="M 1,1 l 9,9 M 10,1 l -9,9" class="arrowMarkerPath" style="stroke-width: 2; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-crossStart" class="marker cross flowchart-v2" viewBox="0 0 11 11" refX="-1" refY="5.2" markerUnits="userSpaceOnUse" markerWidth="11" markerHeight="11" orient="auto"><path d="M 1,1 l 9,9 M 10,1 l -9,9" class="arrowMarkerPath" style="stroke-width: 2; stroke-dasharray: 1, 0;"/></marker><marker id="my-svg_flowchart-v2-crossEnd-margin" class="marker cross flowchart-v2" viewBox="0 0 15 15" refX="17.7" refY="7.5" markerUnits="userSpaceOnUse" markerWidth="12" markerHeight="12" orient="auto"><path d="M 1,1 L 14,14 M 1,14 L 14,1" class="arrowMarkerPath" style="stroke-width: 2.5;"/></marker><marker id="my-svg_flowchart-v2-crossStart-margin" class="marker cross flowchart-v2" viewBox="0 0 15 15" refX="-3.5" refY="7.5" markerUnits="userSpaceOnUse" markerWidth="12" markerHeight="12" orient="auto"><path d="M 1,1 L 14,14 M 1,14 L 14,1" class="arrowMarkerPath" style="stroke-width: 2.5; stroke-dasharray: 1, 0;"/></marker><g class="root"><g class="clusters"><g class="cluster" id="my-svg-LLM" data-look="classic"><rect style="" x="1438.1875" y="8" width="687.046875" height="148"/><g class="cluster-label" transform="translate(1739.4609375, 8)"><foreignObject width="84.5" height="24"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5;"><span class="nodeLabel"><p>LLM routing</p></span></div></foreignObject></g></g><g class="cluster" id="my-svg-N13" data-look="classic"><rect style="" x="493.03125" y="176" width="1211.703125" height="372"/><g class="cluster-label" transform="translate(949.484375, 176)"><foreignObject width="298.796875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5;"><span class="nodeLabel"><p>Native daemon on .13 (NixOS, always-on)</p></span></div></foreignObject></g></g><g class="cluster" id="my-svg-CLIENTS" data-look="classic"><rect style="" x="8" y="148" width="241.3125" height="404"/><g class="cluster-label" transform="translate(104.203125, 148)"><foreignObject width="48.90625" height="24"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5;"><span class="nodeLabel"><p>Clients</p></span></div></foreignObject></g></g></g><g class="edgePaths"><path d="M200.023,222L208.238,222C216.453,222,232.883,222,261.408,222C289.932,222,330.552,222,371.172,222C411.792,222,452.411,222,485.293,234.366C518.175,246.732,543.319,271.463,555.891,283.829L568.463,296.195" id="my-svg-L_D27_D_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_D27_D_0" data-points="W3sieCI6MjAwLjAyMzQzNzUsInkiOjIyMn0seyJ4IjoyNDkuMzEyNSwieSI6MjIyfSx7IngiOjM3MS4xNzE4NzUsInkiOjIyMn0seyJ4Ijo0OTMuMDMxMjUsInkiOjIyMn0seyJ4Ijo1NzEuMzE0MjcwMDE5NTMxMiwieSI6Mjk5fV0=" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M195.125,350L204.156,350C213.188,350,231.25,350,260.591,350C289.932,350,330.552,350,371.172,350C411.792,350,452.411,350,476.221,350C500.031,350,507.031,350,510.531,350L514.031,350" id="my-svg-L_D51_D_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_D51_D_0" data-points="W3sieCI6MTk1LjEyNSwieSI6MzUwfSx7IngiOjI0OS4zMTI1LCJ5IjozNTB9LHsieCI6MzcxLjE3MTg3NSwieSI6MzUwfSx7IngiOjQ5My4wMzEyNSwieSI6MzUwfSx7IngiOjUxOC4wMzEyNSwieSI6MzUwfV0=" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M224.313,478L228.479,478C232.646,478,240.979,478,265.456,478C289.932,478,330.552,478,371.172,478C411.792,478,452.411,478,485.293,465.634C518.175,453.268,543.319,428.537,555.891,416.171L568.463,403.805" id="my-svg-L_M_D_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_M_D_0" data-points="W3sieCI6MjI0LjMxMjUsInkiOjQ3OH0seyJ4IjoyNDkuMzEyNSwieSI6NDc4fSx7IngiOjM3MS4xNzE4NzUsInkiOjQ3OH0seyJ4Ijo0OTMuMDMxMjUsInkiOjQ3OH0seyJ4Ijo1NzEuMzE0MjcwMDE5NTMxMiwieSI6NDAxfV0=" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M728.297,316.243L749.13,309.554C769.964,302.864,811.63,289.485,852.63,282.796C893.63,276.107,933.964,276.107,954.13,276.107L974.297,276.107" id="my-svg-L_D_PI_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_D_PI_0" data-points="W3sieCI6NzI4LjI5Njg3NSwieSI6MzE2LjI0Mjg4OTQ5ODMxNDI0fSx7IngiOjg1My4yOTY4NzUsInkiOjI3Ni4xMDY2MjA3ODg1NzQyfSx7IngiOjk3OC4yOTY4NzUsInkiOjI3Ni4xMDY2MjA3ODg1NzQyfV0=" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M1188.188,313.026L1209.021,320.355C1229.854,327.684,1271.521,342.342,1313.188,349.671C1354.854,357,1396.521,357,1420.983,357C1445.445,357,1452.703,357,1456.332,357L1459.961,357" id="my-svg-L_PI_FS_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_PI_FS_0" data-points="W3sieCI6MTE4OC4xODc1LCJ5IjozMTMuMDI1NzUxMTE2Njc4MX0seyJ4IjoxMzEzLjE4NzUsInkiOjM1N30seyJ4IjoxNDM4LjE4NzUsInkiOjM1N30seyJ4IjoxNDYzLjk2MDkzNzUsInkiOjM1N31d" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M722.628,401L744.406,412.167C766.184,423.333,809.741,445.667,855.205,456.833C900.669,468,948.042,468,971.728,468L995.414,468" id="my-svg-L_D_FW_0" class="edge-thickness-normal edge-pattern-dotted edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_D_FW_0" data-points="W3sieCI6NzIyLjYyODI0NDE3MzcyODgsInkiOjQwMX0seyJ4Ijo4NTMuMjk2ODc1LCJ5Ijo0Njh9LHsieCI6OTk5LjQxNDA2MjUsInkiOjQ2OH1d" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M1188.188,257.346L1209.021,253.622C1229.854,249.897,1271.521,242.449,1313.188,238.724C1354.854,235,1396.521,235,1435.209,214.503C1473.897,194.005,1509.606,153.011,1527.46,132.513L1545.315,112.016" id="my-svg-L_PI_OR_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_PI_OR_0" data-points="W3sieCI6MTE4OC4xODc1LCJ5IjoyNTcuMzQ1ODY3OTkyMjkzOTZ9LHsieCI6MTMxMy4xODc1LCJ5IjoyMzV9LHsieCI6MTQzOC4xODc1LCJ5IjoyMzV9LHsieCI6MTU0Ny45NDIwOTU1ODgyMzU0LCJ5IjoxMDl9XQ==" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/><path d="M1679.734,82L1683.901,82C1688.068,82,1696.401,82,1713.184,82C1729.966,82,1755.198,82,1779.763,82C1804.328,82,1828.227,82,1840.176,82L1852.125,82" id="my-svg-L_OR_OP_0" class="edge-thickness-normal edge-pattern-solid edge-thickness-normal edge-pattern-solid flowchart-link" style=";" data-edge="true" data-et="edge" data-id="L_OR_OP_0" data-points="W3sieCI6MTY3OS43MzQzNzUsInkiOjgyfSx7IngiOjE3MDQuNzM0Mzc1LCJ5Ijo4Mn0seyJ4IjoxNzgwLjQyOTY4NzUsInkiOjgyfSx7IngiOjE4NTYuMTI1LCJ5Ijo4Mn1d" data-look="classic" marker-end="url(#my-svg_flowchart-v2-pointEnd)"/></g><g class="edgeLabels"><g class="edgeLabel" transform="translate(371.171875, 222)"><g class="label" data-id="L_D27_D_0" transform="translate(-96.859375, -12)"><foreignObject width="193.71875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>PASEO_HOST + password</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(371.171875, 350)"><g class="label" data-id="L_D51_D_0" transform="translate(-96.859375, -12)"><foreignObject width="193.71875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>PASEO_HOST + password</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(371.171875, 478)"><g class="label" data-id="L_M_D_0" transform="translate(-75.15625, -12)"><foreignObject width="150.3125" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>Tailscale / LAN :6767</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(853.296875, 276.1066207885742)"><g class="label" data-id="L_D_PI_0" transform="translate(-100, -24)"><foreignObject width="200" height="48"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table; white-space: break-spaces; line-height: 1.5; max-width: 200px; text-align: center; width: 200px;"><span class="edgeLabel"><p>spawns / manages (no sandbox)</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(1313.1875, 357)"><g class="label" data-id="L_PI_FS_0" transform="translate(-100, -24)"><foreignObject width="200" height="48"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table; white-space: break-spaces; line-height: 1.5; max-width: 200px; text-align: center; width: 200px;"><span class="edgeLabel"><p>direct access, real permissions</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(853.296875, 468)"><g class="label" data-id="L_D_FW_0" transform="translate(-48.03125, -12)"><foreignObject width="96.0625" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>listen allowed</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(1313.1875, 235)"><g class="label" data-id="L_PI_OR_0" transform="translate(-61.359375, -12)"><foreignObject width="122.71875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>omni provider /v1</p></span></div></foreignObject></g></g><g class="edgeLabel" transform="translate(1780.4296875, 82)"><g class="label" data-id="L_OR_OP_0" transform="translate(-50.6953125, -12)"><foreignObject width="101.390625" height="24"><div xmlns="http://www.w3.org/1999/xhtml" class="labelBkg" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="edgeLabel"><p>combo routing</p></span></div></foreignObject></g></g></g><g class="nodes"><g class="node default" id="my-svg-flowchart-D27-0" data-look="classic" transform="translate(128.65625, 222)"><rect class="basic label-container" style="" x="-71.3671875" y="-39" width="142.734375" height="78"/><g class="label" style="" transform="translate(-41.3671875, -24)"><rect/><foreignObject width="82.734375" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>.27 desktop<br />paseo CLI</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-D51-1" data-look="classic" transform="translate(128.65625, 350)"><rect class="basic label-container" style="" x="-66.46875" y="-39" width="132.9375" height="78"/><g class="label" style="" transform="translate(-36.46875, -24)"><rect/><foreignObject width="72.9375" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>.51 laptop<br />paseo CLI</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-M-2" data-look="classic" transform="translate(128.65625, 478)"><rect class="basic label-container" style="" x="-95.65625" y="-39" width="191.3125" height="78"/><g class="label" style="" transform="translate(-65.65625, -24)"><rect/><foreignObject width="131.3125" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>Mobile / web UI<br />browser / Tailscale</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-D-3" data-look="classic" transform="translate(623.1640625, 350)"><rect class="basic label-container" style="" x="-105.1328125" y="-51" width="210.265625" height="102"/><g class="label" style="" transform="translate(-75.1328125, -36)"><rect/><foreignObject width="150.265625" height="72"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>Paseo daemon 0.7.2<br />systemd user service<br />0.0.0.0:6767</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-PI-4" data-look="classic" transform="translate(1083.2421875, 276.1066207885742)"><rect class="basic label-container" style="" x="-104.9453125" y="-51" width="209.890625" height="102"/><g class="label" style="" transform="translate(-74.9453125, -36)"><rect/><foreignObject width="149.890625" height="72"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>pi 0.82.1 (Nix)<br />pi --mode rpc<br />host ~/.pi + ~/.agents</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-FS-5" data-look="classic" transform="translate(1571.4609375, 357)"><path d="M0,15.808823529411764 a107.5,15.808823529411764 0,0,0 215,0 a107.5,15.808823529411764 0,0,0 -215,0 l0,126.80882352941177 a107.5,15.808823529411764 0,0,0 215,0 l0,-126.80882352941177" class="basic label-container outer-path" style="" transform="translate(-107.5, -79.21323529411765)"/><g class="label" style="" transform="translate(-100, -38)"><rect/><foreignObject width="200" height="96"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table; white-space: break-spaces; line-height: 1.5; max-width: 200px; text-align: center; width: 200px;"><span class="nodeLabel"><p>Host filesystem as `sam`<br />projects: ~/paseo/projects/<br />obsidian vault, photos, /mnt/*</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-FW-6" data-look="classic" transform="translate(1083.2421875, 468)"><rect class="basic label-container" style="" x="-83.828125" y="-39" width="167.65625" height="78"/><g class="label" style="" transform="translate(-53.828125, -24)"><rect/><foreignObject width="107.65625" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>NixOS firewall<br />port 6767 open</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-OR-7" data-look="classic" transform="translate(1571.4609375, 82)"><rect class="basic label-container" style="" x="-108.2734375" y="-27" width="216.546875" height="54"/><g class="label" style="" transform="translate(-78.2734375, -12)"><rect/><foreignObject width="156.546875" height="24"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>OmniRoute .13:20129</p></span></div></foreignObject></g></g><g class="node default" id="my-svg-flowchart-OP-8" data-look="classic" transform="translate(1978.1796875, 82)"><rect class="basic label-container" style="" x="-122.0546875" y="-39" width="244.109375" height="78"/><g class="label" style="" transform="translate(-92.0546875, -24)"><rect/><foreignObject width="184.109375" height="48"><div xmlns="http://www.w3.org/1999/xhtml" style="display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;"><span class="nodeLabel"><p>OpenRouter / DeepSeek /<br />OpenCode-Go (deferred)</p></span></div></foreignObject></g></g></g></g></g><defs><filter id="my-svg-drop-shadow" height="130%" width="130%"><feDropShadow dx="4" dy="4" stdDeviation="0" flood-opacity="0.06" flood-color="#000000"/></filter></defs><defs><filter id="my-svg-drop-shadow-small" height="150%" width="150%"><feDropShadow dx="2" dy="2" stdDeviation="0" flood-opacity="0.06" flood-color="#000000"/></filter></defs></svg>
\ No newline at end of file
diff --git a/docs/system-map.html b/docs/system-map.html
index bc1681b..f72e3d8 100644
--- a/docs/system-map.html
+++ b/docs/system-map.html
@@ -4,7 +4,7 @@
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <meta name="generator" content="archify 2.14.0">
-  <title>Paseo on the Home Lab Diagram</title>
+  <title>Paseo — Native Daemon on .13 Diagram</title>
   <script>
     // Resolve the theme before first paint so light-preference users don't
     // see a dark flash. The toolbar script below re-applies with UI state.
@@ -4836,7 +4836,7 @@
     <div class="header">
       <div class="header-row">
         <div class="pulse-dot"></div>
-        <h1>Paseo on the Home Lab</h1>
+        <h1>Paseo — Native Daemon on .13</h1>
       </div>
     </div>
 
@@ -4884,7 +4884,7 @@
     <!-- Main Diagram -->
     <div class="diagram-container" data-detail-level="read">
       <svg viewBox="0 0 1120 600" role="img" aria-labelledby="archify-diagram-title archify-diagram-description" data-preset="classic" data-quality-profile="showcase">
-        <title id="archify-diagram-title">Paseo on the Home Lab</title>
+        <title id="archify-diagram-title">Paseo — Native Daemon on .13</title>
         <desc id="archify-diagram-description">A architecture diagram generated by Archify.</desc>
         <!-- Definitions -->
         <defs>
@@ -4909,20 +4909,20 @@
         <rect width="100%" height="100%" fill="url(#grid)" />
 
         <!-- Boundaries (behind everything) -->
-        <rect data-graph-role="structural-frame" data-composition-frame-kind="region" data-composition-frame-id="0" x="90" y="90" width="180" height="230" rx="12" class="c-region" stroke-width="1"/>
+        <rect data-graph-role="structural-frame" data-composition-frame-kind="region" data-composition-frame-id="0" x="90" y="90" width="180" height="240" rx="12" class="c-region" stroke-width="1"/>
         <text x="98" y="108" class="t-cloud" font-size="9" font-weight="600">clients</text>
 
         <rect data-graph-role="structural-frame" data-composition-frame-kind="region" data-composition-frame-id="1" x="390" y="90" width="460" height="430" rx="12" class="c-region" stroke-width="1"/>
-        <text x="398" y="108" class="t-cloud" font-size="9" font-weight="600">Paseo daemon (.13 Docker)</text>
+        <text x="398" y="108" class="t-cloud" font-size="9" font-weight="600">native .13 host (no container)</text>
 
         <!-- Connection paths (before components for correct z-order) -->
         <path data-edge-from="cli" data-edge-to="daemon" data-edge-label="PASEO_HOST + password" data-edge-key="0" data-edge-id="cli-to-daemon" data-composition-points="240,150;420,150" d="M 240 150 L 420 150" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
-        <path data-edge-from="web" data-edge-to="daemon" data-edge-label="https :6767" data-edge-key="1" data-edge-id="web-to-daemon" data-composition-points="240,270;330,270;330,150;420,150" d="M 240 270 L 322 270 Q 330 270 330 262 L 330 158 Q 330 150 338 150 L 420 150" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
-        <path data-edge-from="daemon" data-edge-to="pi" data-edge-label="spawns / manages" data-edge-key="2" data-edge-id="daemon-to-pi" data-composition-points="480,180;480,300" d="M 480 180 L 480 300" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
-        <path data-edge-from="pi" data-edge-to="cfg" data-edge-label="reads settings + models" data-edge-key="3" data-edge-id="pi-to-cfg" data-composition-points="540,330;700,330" d="M 540 330 L 700 330" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
-        <path data-edge-from="pi" data-edge-to="ws" data-edge-label="works in" data-edge-key="4" data-edge-id="pi-to-ws" data-composition-points="540,330;620,330;620,470;700,470" d="M 540 330 L 612 330 Q 620 330 620 338 L 620 462 Q 620 470 628 470 L 700 470" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
-        <path data-edge-from="pi" data-edge-to="omni" data-edge-label="omni provider /v1" data-edge-key="5" data-edge-id="pi-to-omni" data-composition-points="540,330;564,330;564,204;820,204;820,180" d="M 540 330 L 556 330 Q 564 330 564 322 L 564 212 Q 564 204 572 204 L 812 204 Q 820 204 820 196 L 820 180" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
-        <path data-edge-from="omni" data-edge-to="llm" data-edge-label="combo routing" data-edge-key="6" data-edge-id="omni-to-llm" data-composition-points="880,150;940,150" d="M 880 150 L 940 150" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
+        <path data-edge-from="web" data-edge-to="daemon" data-edge-label="Tailscale / LAN :6767" data-edge-key="1" data-edge-id="web-to-daemon" data-composition-points="240,280;330,280;330,150;420,150" d="M 240 280 L 322 280 Q 330 280 330 272 L 330 158 Q 330 150 338 150 L 420 150" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
+        <path data-edge-from="daemon" data-edge-to="pi" data-edge-label="spawns / manages" data-edge-key="2" data-edge-id="daemon-to-pi" data-composition-points="480,180;480,290" d="M 480 180 L 480 290" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
+        <path data-edge-from="pi" data-edge-to="cfg" data-edge-label="host pi config + skills" data-edge-key="3" data-edge-id="pi-to-cfg" data-composition-points="540,320;700,320" d="M 540 320 L 700 320" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
+        <path data-edge-from="pi" data-edge-to="fs" data-edge-label="direct access as sam" data-edge-key="4" data-edge-id="pi-to-fs" data-composition-points="540,320;620,320;620,470;700,470" d="M 540 320 L 612 320 Q 620 320 620 328 L 620 462 Q 620 470 628 470 L 700 470" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
+        <path data-edge-from="pi" data-edge-to="omni" data-edge-label="omni provider /v1" data-edge-key="5" data-edge-id="pi-to-omni" data-composition-points="540,320;564,320;564,204;840,204;840,180" d="M 540 320 L 556 320 Q 564 320 564 312 L 564 212 Q 564 204 572 204 L 832 204 Q 840 204 840 196 L 840 180" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
+        <path data-edge-from="omni" data-edge-to="llm" data-edge-label="combo routing" data-edge-key="6" data-edge-id="omni-to-llm" data-composition-points="900,150;950,150" d="M 900 150 L 950 150" class="a-default" stroke-width="1.5" marker-end="url(#arrowhead)"/>
 
         <!-- Components -->
         <g id="node-cli" data-node-id="cli" data-node-label="paseo CLI" tabindex="0" role="button" aria-label="Focus paseo CLI, .27 / .51, clients" aria-pressed="false" data-node-kind="frontend" data-node-sublabel=".27 / .51" data-node-context="clients">
@@ -4941,85 +4941,85 @@
 
         <g id="node-web" data-node-id="web" data-node-label="Web UI / mobile" tabindex="0" role="button" aria-label="Focus Web UI / mobile, browser :6767, clients" aria-pressed="false" data-node-kind="frontend" data-node-sublabel="browser :6767" data-node-context="clients">
           <title>Web UI / mobile · browser :6767 · clients</title>
-          <rect x="120" y="240" width="120" height="60" rx="6" class="c-mask"/>
-          <rect x="120" y="240" width="120" height="60" rx="6" class="c-frontend" stroke-width="1.5"/>
-          <g aria-hidden="true" data-semantic-sigil="frontend" class="semantic-sigil s-frontend" transform="translate(126 246) scale(0.6875)">
+          <rect x="120" y="250" width="120" height="60" rx="6" class="c-mask"/>
+          <rect x="120" y="250" width="120" height="60" rx="6" class="c-frontend" stroke-width="1.5"/>
+          <g aria-hidden="true" data-semantic-sigil="frontend" class="semantic-sigil s-frontend" transform="translate(126 256) scale(0.6875)">
             <rect x="2" y="3" width="12" height="10" rx="2"/>
             <path d="M2 6.5h12"/>
             <circle cx="4.1" cy="4.8" r=".7" class="sigil-fill"/>
             <circle cx="6.3" cy="4.8" r=".7" class="sigil-fill"/>
           </g>
-          <text data-detail-anchor x="180" y="268" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">Web UI / mobile</text>
-        <text data-detail="context" x="180" y="284" class="t-muted" font-size="9" text-anchor="middle">browser :6767</text>
+          <text data-detail-anchor x="180" y="278" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">Web UI / mobile</text>
+        <text data-detail="context" x="180" y="294" class="t-muted" font-size="9" text-anchor="middle">browser :6767</text>
         </g>
 
-        <g id="node-daemon" data-node-id="daemon" data-node-label="Paseo daemon" tabindex="0" role="button" aria-label="Focus Paseo daemon, 0.7.2 · :6767 · auth, Paseo daemon (.13 Docker)" aria-pressed="false" data-node-kind="backend" data-node-sublabel="0.7.2 · :6767 · auth" data-node-context="Paseo daemon (.13 Docker)">
-          <title>Paseo daemon · 0.7.2 · :6767 · auth · Paseo daemon (.13 Docker)</title>
+        <g id="node-daemon" data-node-id="daemon" data-node-label="Paseo daemon" tabindex="0" role="button" aria-label="Focus Paseo daemon, 0.7.2 · systemd · :6767, native .13 host (no container)" aria-pressed="false" data-node-kind="backend" data-node-sublabel="0.7.2 · systemd · :6767" data-node-context="native .13 host (no container)">
+          <title>Paseo daemon · 0.7.2 · systemd · :6767 · native .13 host (no container)</title>
           <rect x="420" y="120" width="120" height="60" rx="6" class="c-mask"/>
           <rect x="420" y="120" width="120" height="60" rx="6" class="c-backend" stroke-width="1.5"/>
           <g aria-hidden="true" data-semantic-sigil="backend" class="semantic-sigil s-backend" transform="translate(426 126) scale(0.6875)">
             <path d="M6 3 3 8l3 5M10 3l3 5-3 5"/>
           </g>
           <text data-detail-anchor x="480" y="148" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">Paseo daemon</text>
-        <text data-detail="context" x="480" y="164" class="t-muted" font-size="9" text-anchor="middle">0.7.2 · :6767 · auth</text>
+        <text data-detail="context" x="480" y="164" class="t-muted" font-size="8.1" text-anchor="middle">0.7.2 · systemd · :6767</text>
         </g>
 
-        <g id="node-pi" data-node-id="pi" data-node-label="pi agent" tabindex="0" role="button" aria-label="Focus pi agent, 0.82.1 · --mode rpc, Paseo daemon (.13 Docker)" aria-pressed="false" data-node-kind="backend" data-node-sublabel="0.82.1 · --mode rpc" data-node-context="Paseo daemon (.13 Docker)">
-          <title>pi agent · 0.82.1 · --mode rpc · Paseo daemon (.13 Docker)</title>
-          <rect x="420" y="300" width="120" height="60" rx="6" class="c-mask"/>
-          <rect x="420" y="300" width="120" height="60" rx="6" class="c-backend" stroke-width="1.5"/>
-          <g aria-hidden="true" data-semantic-sigil="backend" class="semantic-sigil s-backend" transform="translate(426 306) scale(0.6875)">
+        <g id="node-pi" data-node-id="pi" data-node-label="pi agent" tabindex="0" role="button" aria-label="Focus pi agent, 0.82.1 Nix · --mode rpc, native .13 host (no container)" aria-pressed="false" data-node-kind="backend" data-node-sublabel="0.82.1 Nix · --mode rpc" data-node-context="native .13 host (no container)">
+          <title>pi agent · 0.82.1 Nix · --mode rpc · native .13 host (no container)</title>
+          <rect x="420" y="290" width="120" height="60" rx="6" class="c-mask"/>
+          <rect x="420" y="290" width="120" height="60" rx="6" class="c-backend" stroke-width="1.5"/>
+          <g aria-hidden="true" data-semantic-sigil="backend" class="semantic-sigil s-backend" transform="translate(426 296) scale(0.6875)">
             <path d="M6 3 3 8l3 5M10 3l3 5-3 5"/>
           </g>
-          <text data-detail-anchor x="480" y="328" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">pi agent</text>
-        <text data-detail="context" x="480" y="344" class="t-muted" font-size="9" text-anchor="middle">0.82.1 · --mode rpc</text>
+          <text data-detail-anchor x="480" y="318" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">pi agent</text>
+        <text data-detail="context" x="480" y="334" class="t-muted" font-size="8.1" text-anchor="middle">0.82.1 Nix · --mode rpc</text>
         </g>
 
-        <g id="node-cfg" data-node-id="cfg" data-node-label="pi config" tabindex="0" role="button" aria-label="Focus pi config, paseo-home/.pi, Paseo daemon (.13 Docker)" aria-pressed="false" data-node-kind="database" data-node-sublabel="paseo-home/.pi" data-node-context="Paseo daemon (.13 Docker)">
-          <title>pi config · paseo-home/.pi · Paseo daemon (.13 Docker)</title>
-          <rect x="700" y="300" width="120" height="60" rx="6" class="c-mask"/>
-          <rect x="700" y="300" width="120" height="60" rx="6" class="c-database" stroke-width="1.5"/>
-          <g aria-hidden="true" data-semantic-sigil="database" class="semantic-sigil s-database" transform="translate(706 306) scale(0.6875)">
+        <g id="node-cfg" data-node-id="cfg" data-node-label="pi config" tabindex="0" role="button" aria-label="Focus pi config, host ~/.pi + ~/.agents, native .13 host (no container)" aria-pressed="false" data-node-kind="database" data-node-sublabel="host ~/.pi + ~/.agents" data-node-context="native .13 host (no container)">
+          <title>pi config · host ~/.pi + ~/.agents · native .13 host (no container)</title>
+          <rect x="700" y="290" width="120" height="60" rx="6" class="c-mask"/>
+          <rect x="700" y="290" width="120" height="60" rx="6" class="c-database" stroke-width="1.5"/>
+          <g aria-hidden="true" data-semantic-sigil="database" class="semantic-sigil s-database" transform="translate(706 296) scale(0.6875)">
             <ellipse cx="8" cy="4" rx="5" ry="2"/>
             <path d="M3 4v8c0 1.1 2.2 2 5 2s5-.9 5-2V4M3 8c0 1.1 2.2 2 5 2s5-.9 5-2"/>
           </g>
-          <text data-detail-anchor x="760" y="328" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">pi config</text>
-        <text data-detail="context" x="760" y="344" class="t-muted" font-size="9" text-anchor="middle">paseo-home/.pi</text>
+          <text data-detail-anchor x="760" y="318" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">pi config</text>
+        <text data-detail="context" x="760" y="334" class="t-muted" font-size="8.4" text-anchor="middle">host ~/.pi + ~/.agents</text>
         </g>
 
-        <g id="node-ws" data-node-id="ws" data-node-label="workspace" tabindex="0" role="button" aria-label="Focus workspace, /workspace/demo, Paseo daemon (.13 Docker)" aria-pressed="false" data-node-kind="database" data-node-sublabel="/workspace/demo" data-node-context="Paseo daemon (.13 Docker)">
-          <title>workspace · /workspace/demo · Paseo daemon (.13 Docker)</title>
+        <g id="node-fs" data-node-id="fs" data-node-label="host filesystem" tabindex="0" role="button" aria-label="Focus host filesystem, projects · vault · photos, native .13 host (no container)" aria-pressed="false" data-node-kind="database" data-node-sublabel="projects · vault · photos" data-node-context="native .13 host (no container)">
+          <title>host filesystem · projects · vault · photos · native .13 host (no container)</title>
           <rect x="700" y="440" width="120" height="60" rx="6" class="c-mask"/>
           <rect x="700" y="440" width="120" height="60" rx="6" class="c-database" stroke-width="1.5"/>
           <g aria-hidden="true" data-semantic-sigil="database" class="semantic-sigil s-database" transform="translate(706 446) scale(0.6875)">
             <ellipse cx="8" cy="4" rx="5" ry="2"/>
             <path d="M3 4v8c0 1.1 2.2 2 5 2s5-.9 5-2V4M3 8c0 1.1 2.2 2 5 2s5-.9 5-2"/>
           </g>
-          <text data-detail-anchor x="760" y="468" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">workspace</text>
-        <text data-detail="context" x="760" y="484" class="t-muted" font-size="9" text-anchor="middle">/workspace/demo</text>
+          <text data-detail-anchor x="760" y="468" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">host filesystem</text>
+        <text data-detail="context" x="760" y="484" class="t-muted" font-size="7.4" text-anchor="middle">projects · vault · photos</text>
         </g>
 
         <g id="node-omni" data-node-id="omni" data-node-label="OmniRoute" tabindex="0" role="button" aria-label="Focus OmniRoute, .13:20129, Architecture component" aria-pressed="false" data-node-kind="backend" data-node-sublabel=".13:20129" data-node-context="Architecture component">
           <title>OmniRoute · .13:20129 · Architecture component</title>
-          <rect x="760" y="120" width="120" height="60" rx="6" class="c-mask"/>
-          <rect x="760" y="120" width="120" height="60" rx="6" class="c-backend" stroke-width="1.5"/>
-          <g aria-hidden="true" data-semantic-sigil="backend" class="semantic-sigil s-backend" transform="translate(766 126) scale(0.6875)">
+          <rect x="780" y="120" width="120" height="60" rx="6" class="c-mask"/>
+          <rect x="780" y="120" width="120" height="60" rx="6" class="c-backend" stroke-width="1.5"/>
+          <g aria-hidden="true" data-semantic-sigil="backend" class="semantic-sigil s-backend" transform="translate(786 126) scale(0.6875)">
             <path d="M6 3 3 8l3 5M10 3l3 5-3 5"/>
           </g>
-          <text data-detail-anchor x="820" y="148" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">OmniRoute</text>
-        <text data-detail="context" x="820" y="164" class="t-muted" font-size="9" text-anchor="middle">.13:20129</text>
+          <text data-detail-anchor x="840" y="148" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">OmniRoute</text>
+        <text data-detail="context" x="840" y="164" class="t-muted" font-size="9" text-anchor="middle">.13:20129</text>
         </g>
 
         <g id="node-llm" data-node-id="llm" data-node-label="LLM providers" tabindex="0" role="button" aria-label="Focus LLM providers, combo routing, Architecture component" aria-pressed="false" data-node-kind="external" data-node-sublabel="combo routing" data-node-context="Architecture component">
           <title>LLM providers · combo routing · Architecture component</title>
-          <rect x="940" y="120" width="120" height="60" rx="6" class="c-mask"/>
-          <rect x="940" y="120" width="120" height="60" rx="6" class="c-external" stroke-width="1.5"/>
-          <g aria-hidden="true" data-semantic-sigil="external" class="semantic-sigil s-external" transform="translate(946 126) scale(0.6875)">
+          <rect x="950" y="120" width="120" height="60" rx="6" class="c-mask"/>
+          <rect x="950" y="120" width="120" height="60" rx="6" class="c-external" stroke-width="1.5"/>
+          <g aria-hidden="true" data-semantic-sigil="external" class="semantic-sigil s-external" transform="translate(956 126) scale(0.6875)">
             <rect x="2.5" y="5" width="8.5" height="8" rx="1.5"/>
             <path d="M8 2.5h5.5V8M13.5 2.5 7.5 8.5"/>
           </g>
-          <text data-detail-anchor x="1000" y="148" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">LLM providers</text>
-        <text data-detail="context" x="1000" y="164" class="t-muted" font-size="9" text-anchor="middle">combo routing</text>
+          <text data-detail-anchor x="1010" y="148" class="t-primary" font-size="11" font-weight="600" text-anchor="middle">LLM providers</text>
+        <text data-detail="context" x="1010" y="164" class="t-muted" font-size="9" text-anchor="middle">combo routing</text>
         </g>
 
         <!-- Connection labels -->
@@ -5027,29 +5027,29 @@
           <rect x="214.6" y="50" width="110.8" height="14" rx="3" class="c-mask"/>
           <text x="270" y="60" class="t-muted" font-size="8" text-anchor="middle">PASEO_HOST + password</text>
         </g>
-        <g data-detail="context" data-edge-from="web" data-edge-to="daemon" data-edge-label="https :6767" data-edge-key="1" data-edge-id="web-to-daemon">
-          <rect x="298.6" y="190" width="62.8" height="14" rx="3" class="c-mask"/>
-          <text x="330" y="200" class="t-muted" font-size="8" text-anchor="middle">https :6767</text>
+        <g data-detail="context" data-edge-from="web" data-edge-to="daemon" data-edge-label="Tailscale / LAN :6767" data-edge-key="1" data-edge-id="web-to-daemon">
+          <rect x="274.6" y="195" width="110.8" height="14" rx="3" class="c-mask"/>
+          <text x="330" y="205" class="t-muted" font-size="8" text-anchor="middle">Tailscale / LAN :6767</text>
         </g>
         <g data-detail="context" data-edge-from="daemon" data-edge-to="pi" data-edge-label="spawns / manages" data-edge-key="2" data-edge-id="daemon-to-pi">
           <rect x="436.6" y="195" width="86.8" height="14" rx="3" class="c-mask"/>
           <text x="480" y="205" class="t-muted" font-size="8" text-anchor="middle">spawns / manages</text>
         </g>
-        <g data-detail="context" data-edge-from="pi" data-edge-to="cfg" data-edge-label="reads settings + models" data-edge-key="3" data-edge-id="pi-to-cfg">
-          <rect x="639.8" y="360" width="120.39999999999999" height="14" rx="3" class="c-mask"/>
-          <text x="700" y="370" class="t-muted" font-size="8" text-anchor="middle">reads settings + models</text>
+        <g data-detail="context" data-edge-from="pi" data-edge-to="cfg" data-edge-label="host pi config + skills" data-edge-key="3" data-edge-id="pi-to-cfg">
+          <rect x="579.8" y="275" width="120.39999999999999" height="14" rx="3" class="c-mask"/>
+          <text x="640" y="285" class="t-muted" font-size="8" text-anchor="middle">host pi config + skills</text>
         </g>
-        <g data-detail="context" data-edge-from="pi" data-edge-to="ws" data-edge-label="works in" data-edge-key="4" data-edge-id="pi-to-ws">
-          <rect x="675.8" y="510" width="48.4" height="14" rx="3" class="c-mask"/>
-          <text x="700" y="520" class="t-muted" font-size="8" text-anchor="middle">works in</text>
+        <g data-detail="context" data-edge-from="pi" data-edge-to="fs" data-edge-label="direct access as sam" data-edge-key="4" data-edge-id="pi-to-fs">
+          <rect x="587" y="440" width="106" height="14" rx="3" class="c-mask"/>
+          <text x="640" y="450" class="t-muted" font-size="8" text-anchor="middle">direct access as sam</text>
         </g>
         <g data-detail="context" data-edge-from="pi" data-edge-to="omni" data-edge-label="omni provider /v1" data-edge-key="5" data-edge-id="pi-to-omni">
           <rect x="544.2" y="215" width="91.6" height="14" rx="3" class="c-mask"/>
           <text x="590" y="225" class="t-muted" font-size="8" text-anchor="middle">omni provider /v1</text>
         </g>
         <g data-detail="context" data-edge-from="omni" data-edge-to="llm" data-edge-label="combo routing" data-edge-key="6" data-edge-id="omni-to-llm">
-          <rect x="873.8" y="184" width="72.4" height="14" rx="3" class="c-mask"/>
-          <text x="910" y="194" class="t-muted" font-size="8" text-anchor="middle">combo routing</text>
+          <rect x="878.8" y="184" width="72.4" height="14" rx="3" class="c-mask"/>
+          <text x="915" y="194" class="t-muted" font-size="8" text-anchor="middle">combo routing</text>
         </g>
 
         <!-- Legend -->
@@ -5258,38 +5258,37 @@
       <div class="card">
         <div class="card-header">
           <div class="card-dot cyan"></div>
-          <h3>Proven end-to-end</h3>
+          <h3>Native daemon (2026-09-16)</h3>
         </div>
         <ul>
-          <li>&bull; paseo run --provider pi → agent 560ffca0 (pi/omni/openrouter/qwen/qwen3.7-flash)</li>
-          <li>&bull; Agent read HELLO.txt, wrote DEMO_SUMMARY.md into /workspace/demo</li>
-          <li>&bull; paseo logs shows full timeline (user → thought → shell → read)</li>
-          <li>&bull; Web UI http://192.168.20.13:6767 → HTTP 200</li>
+          <li>&bull; Runs as systemd user service on .13: paseo.service, enabled, 0.0.0.0:6767</li>
+          <li>&bull; Uses the host Nix pi 0.82.1 directly — no baked image, no sandbox</li>
+          <li>&bull; Full filesystem access as user sam: no /mnt mounts needed</li>
+          <li>&bull; NixOS firewall: port 6767 added (configuration.nix)</li>
         </ul>
       </div>
 
       <div class="card">
         <div class="card-header">
           <div class="card-dot emerald"></div>
-          <h3>Deployment facts</h3>
+          <h3>Verified end-to-end</h3>
         </div>
         <ul>
-          <li>&bull; Container: /home/sam/Docker/Containers/paseo/ (restart: always)</li>
-          <li>&bull; pi + omniroute ext baked at build time (USER root) — image runs as paseo (uid 1000)</li>
-          <li>&bull; pi 0.82.1 in container; host Nix pi untouched</li>
-          <li>&bull; Secrets only in .env (chmod 600)</li>
+          <li>&bull; Agent ran in /home/sam/paseo/projects/obsidian_cleanup_tool (NEWPATH_OK)</li>
+          <li>&bull; Model: omni/default-opencode-go-ds-flash (combo, healthy)</li>
+          <li>&bull; Clients: .27 CLl + .51 CLl + mobile web UI all reach daemon over LAN/Tailscale</li>
         </ul>
       </div>
 
       <div class="card">
         <div class="card-header">
           <div class="card-dot amber"></div>
-          <h3>Findings</h3>
+          <h3>Migrated from Docker</h3>
         </div>
         <ul>
-          <li>&bull; OmniRoute default combo (default-opencode-go-ds-flash) → 400 x-opencode-session issue</li>
-          <li>&bull; Working models: openrouter/qwen/qwen3.7-flash, openrouter/openai/gpt-5.6-sol, aug/claude-haiku-4.5</li>
-          <li>&bull; Fix combo/credentials on OmniRoute to restore the default path</li>
+          <li>&bull; Old Docker container removed; legacy backup in ~/paseo/docker-legacy-backup-…</li>
+          <li>&bull; PASEO_PASSWORD preserved in .13 10-secrets.conf</li>
+          <li>&bull; Docker limitation gone: projects live at ~/paseo/projects/ with real paths</li>
         </ul>
       </div>
     </div>
diff --git a/docs/system.architecture.json b/docs/system.architecture.json
index 6270f59..af3a2a0 100644
--- a/docs/system.architecture.json
+++ b/docs/system.architecture.json
@@ -2,7 +2,7 @@
   "schema_version": 1,
   "diagram_type": "architecture",
   "meta": {
-    "title": "Paseo on the Home Lab",
+    "title": "Paseo — Native Daemon on .13",
     "quality_profile": "showcase",
     "viewBox": [1120, 600]
   },
@@ -19,34 +19,34 @@
       "type": "frontend",
       "label": "Web UI / mobile",
       "sublabel": "browser :6767",
-      "pos": [120, 240]
+      "pos": [120, 250]
     },
     {
       "id": "daemon",
       "type": "backend",
       "label": "Paseo daemon",
-      "sublabel": "0.7.2 · :6767 · auth",
+      "sublabel": "0.7.2 · systemd · :6767",
       "pos": [420, 120]
     },
     {
       "id": "pi",
       "type": "backend",
       "label": "pi agent",
-      "sublabel": "0.82.1 · --mode rpc",
-      "pos": [420, 300]
+      "sublabel": "0.82.1 Nix · --mode rpc",
+      "pos": [420, 290]
     },
     {
       "id": "cfg",
       "type": "database",
       "label": "pi config",
-      "sublabel": "paseo-home/.pi",
-      "pos": [700, 300]
+      "sublabel": "host ~/.pi + ~/.agents",
+      "pos": [700, 290]
     },
     {
-      "id": "ws",
+      "id": "fs",
       "type": "database",
-      "label": "workspace",
-      "sublabel": "/workspace/demo",
+      "label": "host filesystem",
+      "sublabel": "projects · vault · photos",
       "pos": [700, 440]
     },
     {
@@ -54,14 +54,14 @@
       "type": "backend",
       "label": "OmniRoute",
       "sublabel": ".13:20129",
-      "pos": [760, 120]
+      "pos": [780, 120]
     },
     {
       "id": "llm",
       "type": "external",
       "label": "LLM providers",
       "sublabel": "combo routing",
-      "pos": [940, 120]
+      "pos": [950, 120]
     }
   ],
   "boundaries": [
@@ -72,8 +72,8 @@
     },
     {
       "kind": "region",
-      "label": "Paseo daemon (.13 Docker)",
-      "wraps": ["daemon", "pi", "cfg", "ws"]
+      "label": "native .13 host (no container)",
+      "wraps": ["daemon", "pi", "cfg", "fs"]
     }
   ],
   "connections": [
@@ -88,7 +88,7 @@
       "id": "web-to-daemon",
       "from": "web",
       "to": "daemon",
-      "label": "https :6767"
+      "label": "Tailscale / LAN :6767"
     },
     {
       "id": "daemon-to-pi",
@@ -103,15 +103,15 @@
       "id": "pi-to-cfg",
       "from": "pi",
       "to": "cfg",
-      "label": "reads settings + models",
-      "labelAt": [700, 370]
+      "label": "host pi config + skills",
+      "labelAt": [640, 285]
     },
     {
-      "id": "pi-to-ws",
+      "id": "pi-to-fs",
       "from": "pi",
-      "to": "ws",
-      "label": "works in",
-      "labelAt": [700, 520]
+      "to": "fs",
+      "label": "direct access as sam",
+      "labelAt": [640, 450]
     },
     {
       "id": "pi-to-omni",
@@ -127,37 +127,36 @@
       "from": "omni",
       "to": "llm",
       "label": "combo routing",
-      "labelAt": [910, 194]
+      "labelAt": [915, 194]
     }
   ],
   "cards": [
     {
       "dot": "cyan",
-      "title": "Proven end-to-end",
+      "title": "Native daemon (2026-09-16)",
       "items": [
-        "paseo run --provider pi → agent 560ffca0 (pi/omni/openrouter/qwen/qwen3.7-flash)",
-        "Agent read HELLO.txt, wrote DEMO_SUMMARY.md into /workspace/demo",
-        "paseo logs shows full timeline (user → thought → shell → read)",
-        "Web UI http://192.168.20.13:6767 → HTTP 200"
+        "Runs as systemd user service on .13: paseo.service, enabled, 0.0.0.0:6767",
+        "Uses the host Nix pi 0.82.1 directly — no baked image, no sandbox",
+        "Full filesystem access as user sam: no /mnt mounts needed",
+        "NixOS firewall: port 6767 added (configuration.nix)"
       ]
     },
     {
       "dot": "emerald",
-      "title": "Deployment facts",
+      "title": "Verified end-to-end",
       "items": [
-        "Container: /home/sam/Docker/Containers/paseo/ (restart: always)",
-        "pi + omniroute ext baked at build time (USER root) — image runs as paseo (uid 1000)",
-        "pi 0.82.1 in container; host Nix pi untouched",
-        "Secrets only in .env (chmod 600)"
+        "Agent ran in /home/sam/paseo/projects/obsidian_cleanup_tool (NEWPATH_OK)",
+        "Model: omni/default-opencode-go-ds-flash (combo, healthy)",
+        "Clients: .27 CLl + .51 CLl + mobile web UI all reach daemon over LAN/Tailscale"
       ]
     },
     {
       "dot": "amber",
-      "title": "Findings",
+      "title": "Migrated from Docker",
       "items": [
-        "OmniRoute default combo (default-opencode-go-ds-flash) → 400 x-opencode-session issue",
-        "Working models: openrouter/qwen/qwen3.7-flash, openrouter/openai/gpt-5.6-sol, aug/claude-haiku-4.5",
-        "Fix combo/credentials on OmniRoute to restore the default path"
+        "Old Docker container removed; legacy backup in ~/paseo/docker-legacy-backup-…",
+        "PASEO_PASSWORD preserved in .13 10-secrets.conf",
+        "Docker limitation gone: projects live at ~/paseo/projects/ with real paths"
       ]
     }
   ]
diff --git a/docs/system.mmd b/docs/system.mmd
index 40f7101..9270d6d 100644
--- a/docs/system.mmd
+++ b/docs/system.mmd
@@ -2,25 +2,23 @@ flowchart LR
     subgraph CLIENTS["Clients"]
         D27[".27 desktop<br/>paseo CLI"]
         D51[".51 laptop<br/>paseo CLI"]
-        M["Mobile / web UI<br/>browser"]
+        M["Mobile / web UI<br/>browser / Tailscale"]
     end
-    subgraph S13["Paseo daemon (.13 — Docker, always-on)"]
-        D["Paseo daemon 0.7.2<br/>:6767 · auth"]
-        PI["pi agent 0.82.1<br/>pi --mode rpc<br/>@earendil pi + omni ext"]
-        CFG["pi config<br/>/home/paseo/.pi"]
-        W["workspaces<br/>/workspace/demo"]
-        PWD["PASEO_PASSWORD<br/>.env (600)"]
+    subgraph N13["Native daemon on .13 (NixOS, always-on)"]
+        D["Paseo daemon 0.7.2<br/>systemd user service<br/>0.0.0.0:6767"]
+        PI["pi 0.82.1 (Nix)<br/>pi --mode rpc<br/>host ~/.pi + ~/.agents"]
+        FS[("Host filesystem as `sam`<br/>projects: ~/paseo/projects/<br/>obsidian vault, photos, /mnt/*")]
+        FW["NixOS firewall<br/>port 6767 open"]
     end
     subgraph LLM["LLM routing"]
-        OR["OmniRoute<br/>.13:20129"]
-        OP["OpenCode-Go /<br/>OpenRouter / DeepSeek / Gemini"]
+        OR["OmniRoute .13:20129"]
+        OP["OpenRouter / DeepSeek /<br/>OpenCode-Go (deferred)"]
     end
     D27 -->|"PASEO_HOST + password"| D
     D51 -->|"PASEO_HOST + password"| D
-    M -->|"https :6767"| D
-    D -->|"spawns / manages"| PI
-    PI -->|"reads settings + models"| CFG
-    PI -->|"works in"| W
-    D -->|"protects"| PWD
-    PI -->|"httpx /v1 (omni provider)"| OR
+    M -->|"Tailscale / LAN :6767"| D
+    D -->|"spawns / manages (no sandbox)"| PI
+    PI -->|"direct access, real permissions"| FS
+    D -.->|"listen allowed"| FW
+    PI -->|"omni provider /v1"| OR
     OR -->|"combo routing"| OP
\ No newline at end of file