emrg: README fact fixes (Codex open-source) + trust copy (security boundary / BYOK)

README.cn.md

@@ -82,6 +82,8 @@ EMRG 不只是一个工具——它是一个**会听吐槽、会自我改进**
 
 **首次使用**：打开 **EMRG** → 引导配置 **API Key / 模型** → 开始对话。TUI 同步可用：任意终端运行 `emrg` 即可（配置共享）。
 
+> **自带 API Key** — EMRG 使用你自己的 LLM API Key 和额度/账单；软件本身免费、MIT 开源。
+
 > 想从源码安装，或需要高级配置 / 架构 / 贡献者文档？→ [DEVELOPMENT.md](DEVELOPMENT.md)
 
 ---
@@ -126,7 +128,9 @@ EMRG 不只是一个工具——它是一个**会听吐槽、会自我改进**
 | **自主进化** | ❌ | ❌ | ✅ *全自动* |
 | **后台守护进程** | ❌ | ❌ | ✅ *持久运行* |
 | **吐槽驱动自我改进** | ❌ | ❌ | ✅ */rant → PR* |
-| **开源** | ❌ | ❌ | ✅ *MIT* |
+| **开源** | ❌ | ✅ *Apache-2.0* | ✅ *MIT* |
+
+> *Codex 虽开源但无自进化——开源本身不是差异点，闭环进化才是。*
 
 EMRG 不只是追赶——它自己追上来。
 
@@ -140,6 +144,9 @@ EMRG 不只是追赶——它自己追上来。
 **它会把自己搞崩吗？**<br>
 每次改动都会通过 `pytest` 和 import 检查验证后才提交。失败的改动会被丢弃；最坏的情况就是回滚。
 
+**它会动我项目的代码吗？**<br>
+不会。自我进化只修改它自己的仓库（`~/.emrg/evolution/emrg`），从不碰你的项目文件。它在你项目上运行的工具，只有你让它运行的那些——而且它做的每处改动都是经过测试、走 PR 评审的。
+
 **和 Claude Code 或 Codex 有什么不同？**<br>
 它们是产品。EMRG 是一个关于*闭环进化*的实验——AI 改进 AI。完全开源，无厂商锁定。
 

README.md

@@ -82,6 +82,8 @@ Download from [GitHub Releases](https://github.com/argszero/emrg/releases) and d
 
 **First time**: launch **EMRG** → the wizard sets your **API key / model** → start chatting. The TUI is ready too: run `emrg` in any terminal (config is shared).
 
+> **Bring your own key** — EMRG uses your LLM API key and your quota/billing; the software itself is free and MIT-licensed.
+
 > Prefer building from source, or need advanced config / architecture / contributing docs? → [DEVELOPMENT.md](DEVELOPMENT.md)
 
 ---
@@ -126,7 +128,9 @@ Download from [GitHub Releases](https://github.com/argszero/emrg/releases) and d
 | **Self-evolution** | ❌ | ❌ | ✅ *autonomous* |
 | **Background daemon** | ❌ | ❌ | ✅ *persistent* |
 | **Learns from rants** | ❌ | ❌ | ✅ */rant → PR* |
-| **Open source** | ❌ | ❌ | ✅ *MIT* |
+| **Open source** | ❌ | ✅ *Apache-2.0* | ✅ *MIT* |
+
+> *Codex is open source but has no self-evolution — openness alone isn't the differentiator; closing the loop is.*
 
 EMRG doesn't just keep up — it catches up on its own.
 
@@ -140,6 +144,9 @@ Yes. The evolution cycle reads the evolution prompt, reviews rants + issues + co
 **Can it break itself?**<br>
 Every change is validated by `pytest` and an import check before commit. Failed changes are discarded; the worst case is a rollback.
 
+**Will it touch my project's code?**<br>
+No. Self-evolution only modifies its own repository (`~/.emrg/evolution/emrg`), never your project files. The tools it runs on your project are only the ones you ask it to run — and every change it makes is a reviewed PR, tested before merge.
+
 **How is this different from Claude Code or Codex?**<br>
 They're products. EMRG is an experiment in *closing the loop* — the AI improves the AI. Fully open source, no vendor lock-in.