diff --git a/memory/.dream_cursor b/memory/.dream_cursor
index cadbe92..96baa13 100644
--- a/memory/.dream_cursor
+++ b/memory/.dream_cursor
@@ -1 +1 @@
-378
\ No newline at end of file
+381
\ No newline at end of file
diff --git a/memory/MEMORY.md b/memory/MEMORY.md
index 548eb59..5b5774b 100644
--- a/memory/MEMORY.md
+++ b/memory/MEMORY.md
@@ -6,7 +6,7 @@ This file stores important information that should persist across sessions.
 
 - nanobot podporuje cross-channel session continuity přes `unifiedSession: true` v `config.json` pod `agents.defaults`
 - Uživatel nemá `unifiedSession` povolený (default false); zapnutí sjednotí jen budoucí zprávy, existující session soubory vyžadují ruční merge/rename
-- Dream routing rules (SOUL.md → personality, USER.md → user profile, MEMORY.md → project knowledge) are hardcoded in Dream prompt, not user-configurable beyond interval/model/batch size
+- Dream routing rules (SOUL.md → personality, USER.md → user profile, MEMORY.md → project knowledge) and core logic (Phase 1/2 instructions, fact/decision/ephemeral classification, deduplication) are hardcoded in nanobot Python source; only adjustable settings are intervalH, modelOverride, maxBatchSize, maxIterations
 - User wants native deterministic command dispatch (`!command text` → registered Python function/external app, no LLM involvement) and is exploring litellm proxy for Ollama
 - User considers Raspberry Pi good for testing
 - User wants to try writing a nanobot extension in TypeScript
@@ -17,6 +17,8 @@ This file stores important information that should persist across sessions.
 - Installed as a `uv` tool: package `nanobot-ai`, update via `uv tool upgrade nanobot-ai`
 - Runs as a systemd user service `nanobot.service`
 - Model switching via `my` tool requires `tools.my.allow_set = true` in config
+- Workspace safety guard restricts file tool access to `~/.nanobot/workspace/`; paths outside are inaccessible even for reading nanobot source code
+- `compact-memory-auto-daily` cron job runs in Telegram session (id: 69484aa6) so reports deliver to Telegram instead of WebUI
 
 ---