[jebrans]

Summary

• Correct outdated claims that dynamic PowerShell flows execute in a sandbox or that import analysis certifies script safety.
• Explain the current authorization-based contract: approved scripts run with TypeAgent's existing Windows user privileges, subject to OS policy. Users can review the full root script and invocation details; opening the full review is optional, and Cancel remains the default.
• Clarify exact-invocation/session approval, fresh consent for reasoning/tests/repairs, version-check limits, and the distinction between broker process management and sandbox containment.
• Refresh the generated companion's references and metadata against the authoritative hand-written README.

Scope

Documentation only: the PowerShell README and its generated companion. No runtime behavior, authorization defaults, execution flags, or AppContainer settings change. Reviewed built-in actions and independent shell/MCP tools retain their own policies.

Validation

• Pinned Prettier check passed for both changed files.
• Documentation link verification passed: 30 links, zero broken.
• Documentation structure and generated input hash validation passed.
• git diff --check passed.
• Lint, complexity and test-debt gates reported no changed source files.
• The local circular-dependency gate could not complete because Windows locked temporary-worktree cleanup; another attempt encountered Windows path limits. Temporary worktrees were cleaned up. No dependency or source-code changes are included.