Posted an update

Access is directory allow-list only, set via CLI args or dynamically over MCP Roots. No network access, ever.