Refresh verification runtime docs

README.md

@@ -156,7 +156,7 @@ bun run build
 
 ## Documentation
 
-- [Architecture](docs/architecture.md) — Data flow, room model, verification isolation, key files
+- [Architecture](docs/architecture.md) — Data flow, room model, verification execution, key files
 - [Configuration](docs/configuration.md) — Full `.env` reference, debugging paths
 
 ### Environment

docs/architecture.md

@@ -77,7 +77,7 @@ User message
           → Arbiter summoned → binding verdict → loop resumes
 ```
 
-## Verification Isolation
+## Verification Execution
 
 Reviewer and arbiter now run as host processes with role-scoped read-only
 guards and sandbox settings. Verification profiles run directly on the host with

runners/agent-runner/src/ipc-mcp-stdio.ts

@@ -422,7 +422,7 @@ server.tool(
 
 server.tool(
   'run_verification',
-  'Run a fixed verification profile against the current repo snapshot using an isolated scratch workspace and the reviewer runtime image. Use this instead of broad shell write access for test/typecheck/build verification.',
+  'Run a fixed verification profile directly on the host against the current repo snapshot using a restricted environment and snapshot checks. Use this instead of broad shell write access for test/typecheck/build verification.',
   {
     profile: z
       .enum(VERIFICATION_PROFILES)