Fusion AI: honest Incognito copy and the README section

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

README.md

@@ -69,16 +69,30 @@ Two things are fetched at runtime rather than bundled:
 - **three.js** `0.160.0` from `cdn.jsdelivr.net` — powers the Fusion
   Chamber 3D visual (§12). If the CDN is unreachable that section
   degrades; the rest of the page is unaffected.
-- **The AI assistant widget** posts to `window.FUSION_AI_ENDPOINT`,
-  falling back to `text.pollinations.ai`. See the note below.
+- **Fusion AI**, the assistant widget: `fusion/fusion.js`, loaded on
+  demand. It posts to HAL 8's public route (see the note below), and its
+  Python **Run** button loads Pyodide from `cdn.jsdelivr.net` on first use.
 
-## Note on the AI assistant
+## Fusion AI (powered by HAL 8)
 
-The chat widget in the bottom-right sends visitor messages to a
-third-party inference endpoint by default. `window.FUSION_AI_ENDPOINT`
-can be repointed at HAL 8's own OpenAI-compatible API
-(`https://hal8.odyssey-works.io/v1`) so conversations stay on
-Odyssey Works infrastructure.
+The red-eye button in the bottom-right is Fusion AI. The page holds no key.
+It posts to `https://hal8.odyssey-works.io/v1/public/fusion/chat`, and
+`window.FUSION_AI_ENDPOINT` overrides that for testing. The route runs
+HAL 8's headless pipeline under its own capped account: $1 a day for
+everyone, and per visitor 40 messages, 6 images and 1 video a day. Its full
+contract is `docs/FUSION.md` in the HAL 8 repository.
+
+- **Standard | Incognito** is the only control.
+  - Standard is `hal8-auto`; the conversation is kept in this browser only.
+  - Incognito is a Venice private model; nothing is kept, and generated
+    media is deleted after a day.
+- Chat, code, web search, images, video and voice are always on.
+- Python code blocks run in the visitor's browser.
+
+The widget is `fusion/fusion.js` and `fusion/fusion.css`. After editing
+either, run `python3 tools/fusion_inject.py`: it inlines the CSS and
+re-stamps the module version inside `index.html`, and re-running it
+replaces rather than duplicates.
 
 ## Markets section — live feeds
 

fusion/fusion.js

@@ -4,7 +4,8 @@
 // The browser never holds a key: it talks to HAL 8's public Fusion endpoint, which runs the
 // request through HAL 8's headless pipeline under its own capped service account.
 //   Standard  - hal8-auto; the conversation is kept in this browser (localStorage) until cleared.
-//   Incognito - nothing is kept: not here, and the request is marked no-retention on the server.
+//   Incognito - a Venice private model; no conversation is kept, here or on HAL 8, and the
+//               pictures and clips it makes are deleted after a day.
 
 const EYE = 'universe/logos/hal8-eye.png';
 const STORE = 'f8.chat.v1';
@@ -97,7 +98,7 @@ export function mount(root, opts = {}) {
       <div class="f8-modebar"><div class="f8-pill" role="tablist" aria-label="Mode">
         <button role="tab" data-mode="standard" aria-selected="true" class="on">Standard</button>
         <button role="tab" data-mode="incognito" aria-selected="false">${I.incog} Incognito</button></div></div>
-      <div class="f8-incog-note">${I.incog} Incognito &middot; nothing is saved, here or on the server</div>
+      <div class="f8-incog-note">${I.incog} Incognito &middot; nothing is saved &middot; pictures vanish in a day</div>
       <div class="f8-body" aria-live="polite"></div>
       <div class="f8-compose">
         <div class="f8-listen" hidden><span class="f8-wave"><i></i><i></i><i></i><i></i><i></i><i></i><i></i></span><span class="f8-heard">Listening&hellip;</span></div>