Updated docs.

README.md

@@ -62,7 +62,12 @@ without a published compatible release show a clear message and remain unchecked
 No source builds or install scripts run during this workflow. Resource limits
 do not make untrusted same-user programs safe.
 
-After installation, refresh status until Active and use Cthulhu+Alt+Shift+H.
+Install and enable reports success after the Tentacle becomes Active. A failed
+start returns an error and leaves the installed package disabled. Enable it again
+to retry. Activation needs no administrator setup or particular init system;
+configured cgroup resource limits are optional.
+
+For Hello World, use Cthulhu+Alt+Shift+H after activation.
 Disable retains the package; re-enabling and reader startup use installed files
 without network access. Removing the source retains installed Tentacles. Removing
 a managed Tentacle stops it and deletes its package files after shutdown.
@@ -309,8 +314,10 @@ substituting your absolute executable path and launch ID `greeting`, with
 `Presentation: true` in the launch JSON. `--replace --tentacles` replaces the
 current Go reader and selects the development list instead of the saved registry;
 run it explicitly when ready. Rebuild the reader first if its implementation
-changed. Production activation requires delegated cgroup resources and does not
-silently fall back when delegation fails.
+changed. Production activation uses init-independent process supervision and
+needs no administrator setup. Kernel resource limits are optional: configure a
+delegated cgroup v2 parent with `--tentacle-cgroup-parent` or
+`CTHULHU_TENTACLE_CGROUP_PARENT`. An invalid explicit parent fails startup.
 
 Test the shortcut, learn mode, remapping, ordinary reading and web navigation on
 Xorg. Verify speech modes, interruption, screen lock, terminal handoff, disable

hello-world/README.md

@@ -60,9 +60,10 @@ When ready to test, launch the rebuilt reader explicitly:
 ```
 
 That command replaces the running Go reader and selects the development launch
-list instead of saved Tentacles. The reader automatically requests systemd user
-cgroup delegation. A delegation failure leaves the Tentacle unavailable.
-Resource limits do not make untrusted same-user programs safe.
+list instead of saved Tentacles. The reader supervises each Tentacle directly;
+no administrator setup or particular init system is required. Kernel CPU, memory
+and task limits are optional and require an explicitly configured delegated
+cgroup v2 parent. Tentacles run with your account's access; install trusted code.
 
 ## Live verification