PR #2 shipped 'never stored server-side', which is true but materially incomplete - the mnemonic is a tool-call parameter, so it transits the MCP client, the model provider, and hosted process memory. Replaced with an accurate notice pointing at the architecture doc.