- Remove "network-restricted" from tagline (not implemented yet)
- Fix persistence claim: auth tokens and history persist, not settings/keybindings
- Add missing tools to base image list (jq, difftastic, ranger)
- Add src/config.rs to repository layout
- Update dependency example version

Assisted-by: Claude Opus 4.6 via pi

diff --git a/AGENTS.md b/AGENTS.md
index f906164..bf3ac4d 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -8,7 +8,9 @@ Ramekin is a containerized harness for running the [pi coding agent](https://git
 
 ```
 Cargo.toml              # Single-crate workspace
-src/main.rs             # CLI: builds image, generates compose, starts container, attaches
+src/
+  main.rs               # CLI: builds image, generates compose, starts container, attaches
+  config.rs             # KDL config loading, mount resolution, pi assembly
 build.rs                # Sets RAMEKIN_VERSION from env or git rev
 assets/
   Dockerfile            # Agent container image (Node.js + pi + jj + Rust)
@@ -49,7 +51,7 @@ just           # All four
 
 ## Dependencies
 
-- Production dependencies use `*` (unpinned) versions, except for pre-release crates which pin the exact version (e.g. `serde-kdl2 = "0.1.1-alpha.5"`).
+- Production dependencies use `*` (unpinned) versions, except for pre-release crates which pin the exact version (e.g. `serde-kdl2 = "0.1.1-alpha.6"`).
 - Dev dependencies also use `*`. Do not pin to the version `cargo add` resolves.
 - `Cargo.lock` is committed.
 
diff --git a/README.md b/README.md
index 3925ef4..15178f7 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # Ramekin
 
-Containerized harness for running the [pi coding agent](https://github.com/badlogic/pi-mono) with network-restricted access.
+Containerized harness for running the [pi coding agent](https://github.com/badlogic/pi-mono).
 
 ## Quick start
 
@@ -10,7 +10,7 @@ ramekin /some/path   # mount a specific workspace
 ramekin run --rebuild  # force a full image rebuild
 ```
 
-Ramekin builds a Docker image with pi and its dependencies, starts it via Docker Compose, and attaches your terminal. Auth state, settings, and keybindings persist across runs.
+Ramekin builds a Docker image with pi and its dependencies, starts it via Docker Compose, and attaches your terminal. Auth tokens and session history persist across runs.
 
 ## How it works
 
@@ -90,7 +90,7 @@ A built-in pi extension (`ramekin.ts`) is mounted into the agent container. It a
 
 ### Custom Dockerfile
 
-Place a `Dockerfile` at `.ramekin/Dockerfile` in your workspace to extend the base agent image. Use `FROM ramekin-agent` to layer on top — the base image includes Node.js, pi, git, jj, ripgrep, fd, just, and Rust tooling.
+Place a `Dockerfile` at `.ramekin/Dockerfile` in your workspace to extend the base agent image. Use `FROM ramekin-agent` to layer on top — the base image includes Node.js, pi, git, jj, ripgrep, fd, just, jq, difftastic, ranger, and Rust tooling.
 
 The workspace is used as the build context, so `COPY` instructions work relative to the project root.