mortalpastry

Exposes one granted folder to any AI client, read-only, behind a path-containment fence.