Updates

docs/settings.md

@@ -7,6 +7,28 @@ HoneyPeer, LLC**. The standalone Control Center
 or the installed **Jarvis** launcher) uses the same pages. Search is available
 in the window header.
 
+## Agent access
+
+Open **Access** to choose desktop mode, camera access, file scope, and Obsidian
+vault/memory permissions in one place.
+
+- **Save & Allow** saves the form, applies it, and grants the selected desktop
+  and camera access. Complete the GNOME screen/permission prompt if shown.
+- **Save only** applies settings without starting a new temporary grant.
+- **Stop desktop & camera** revokes both temporary grants, including a pending
+  request. Saved file and vault permissions remain as selected.
+
+The live status shows whether each grant is off, waiting for permission, or on,
+with time and desktop actions remaining. Renew with **Save & Allow**. Camera is
+excluded by default. Duration and action budgets are under **Access limits**.
+Device and image-quality choices remain on **Desktop**; vault initialization,
+verification, and browsing remain on **Obsidian**.
+
+File access changes now apply without a service restart and reset the agent
+conversation. File scope governs file tools; shell commands still run with the
+user account's privileges. Disable the vault or its memory switch and save to
+remove that access. Obsidian stays opt-in.
+
 ## Choosing a voice
 
 1. On **Voice**, enable **Spoken replies** and choose a speech model.
@@ -211,7 +233,8 @@ selected model; the automated schema checks do not establish those results.
 
 ## Optional Obsidian vault
 
-The **Obsidian** page configures an agent-only vault, disabled by default. It
+The **Access** page enables the agent-only vault and its memory, both disabled
+by default. The **Obsidian** page configures the vault folder. It
 includes folder selection, initialization, actual read/write and memory probes,
 note browsing/search, and opening the vault in Obsidian. See
 [Obsidian setup and bridge operations](obsidian.md). Applying these settings