diff --git a/README.md b/README.md
index dbfc392..0c54364 100644
--- a/README.md
+++ b/README.md
@@ -156,7 +156,7 @@ bun run build
 
 ## Documentation
 
-- [Architecture](docs/architecture.md) — Data flow, room model, verification isolation, key files
+- [Architecture](docs/architecture.md) — Data flow, room model, verification execution, key files
 - [Configuration](docs/configuration.md) — Full `.env` reference, debugging paths
 
 ### Environment
diff --git a/docs/architecture.md b/docs/architecture.md
index cfc9322..60ef9bd 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -77,7 +77,7 @@ User message
           → Arbiter summoned → binding verdict → loop resumes
 ```
 
-## Verification Isolation
+## Verification Execution
 
 Reviewer and arbiter now run as host processes with role-scoped read-only
 guards and sandbox settings. Verification profiles run directly on the host with
diff --git a/runners/agent-runner/src/ipc-mcp-stdio.ts b/runners/agent-runner/src/ipc-mcp-stdio.ts
index 9129caf..f45627b 100644
--- a/runners/agent-runner/src/ipc-mcp-stdio.ts
+++ b/runners/agent-runner/src/ipc-mcp-stdio.ts
@@ -422,7 +422,7 @@ server.tool(
 
 server.tool(
   'run_verification',
-  'Run a fixed verification profile against the current repo snapshot using an isolated scratch workspace and the reviewer runtime image. Use this instead of broad shell write access for test/typecheck/build verification.',
+  'Run a fixed verification profile directly on the host against the current repo snapshot using a restricted environment and snapshot checks. Use this instead of broad shell write access for test/typecheck/build verification.',
   {
     profile: z
       .enum(VERIFICATION_PROFILES)