From eb2d133a0be040e583e98e04d9101a7721ccbe31 Mon Sep 17 00:00:00 2001
From: Pinky
 <5f5ab050ec58ae208332edd544ebf705221e24c1b86d82a6ca07038a7a8f6ac9@buzz.block.builderlab.xyz>
Date: Wed, 30 Sep 2026 16:06:59 -0600
Subject: [PATCH] docs(vision): match the agent's unsafe claim to the policy

buzz-dev-mcp already used unsafe for Windows job objects, so "Zero unsafe" was untrue. Say what holds: no unsafe beyond audited OS calls.

Signed-off-by: Pinky <5f5ab050ec58ae208332edd544ebf705221e24c1b86d82a6ca07038a7a8f6ac9@buzz.block.builderlab.xyz>
---
 VISION_AGENT.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/VISION_AGENT.md b/VISION_AGENT.md
index 2b2597c8d2..8a8d62bcdf 100644
--- a/VISION_AGENT.md
+++ b/VISION_AGENT.md
@@ -54,7 +54,7 @@ Two pipes. Two protocols. Each session gets its own MCP server instances — ful
 
 - **Minimal.** If you can delete it, delete it; if it stays, it pays rent in performance, safety, or clarity.
 
-- **Hardened.** Zero unsafe. Zero panics. Bounded process lifetime, bounded output sizes, bounded history. Process-group kill on every exit path. File edits resolve against the working directory. The shell runs at the operator's trust level, like bash itself. History validity is maintained on every cancellation path. The system degrades gracefully, with bounded failure modes.
+- **Hardened.** No unsafe beyond audited OS calls. Zero panics. Bounded process lifetime, bounded output sizes, bounded history. Process-group kill on every exit path. File edits resolve against the working directory. The shell runs at the operator's trust level, like bash itself. History validity is maintained on every cancellation path. The system degrades gracefully, with bounded failure modes.
 
 - **Protocol-native.** ACP is the only interface to the agent. MCP is the only interface to the tools. No runtime coupling. No shared state. No custom wire formats.