cleanup

README.md

@@ -55,9 +55,9 @@ directory. Failure stops the command; snapshots are removed on exit. It neither
 updates inputs nor creates result links or activates systems. The implementation is
 `scripts/validate.py`; `just` and Python are installed on both workstations.
 
-Use targeted hosts during iteration and full validation for a completed batch.
-Documentation-only changes need review and `git diff --check`, not system builds.
-Build, activation and interactive behavior are separate evidence.
+Run targeted host builds or full validation only when explicitly requested. Routine
+changes need a focused review or small manual check. Build, activation and
+interactive behavior are separate evidence.
 
 User-owned activation:
 
@@ -76,8 +76,8 @@ provisioning is documented with workbench. Never put plaintext secrets in Nix.
 - **Orientation:** Super+Shift+N names the focused workspace; submit an empty name
   to clear it. Named empty workspaces persist until cleared. Noctalia shows labels;
   terminal titles include the working directory and command.
-- **Icons/vault:** check Oil from Walker and Nautilus device/symbolic icons. Walker's
-  `?` vault provider should request unlocking on use, never during desktop startup.
+- **Icons/vault:** check Oil from Walker and Nautilus device/symbolic icons. Check
+  Walker's `?` vault provider; upstream Elephant may query `rbw` during startup.
 - **Calendar:** in Noctalia Settings → Services → Calendar, set the Radicale
   password through the existing Personal account (GNOME Keyring). Add an ICS account
   named Work using Outlook's published URL. Keep this URL in writable Noctalia