diff --git a/packages/cli/README.md b/packages/cli/README.md
index 3ee324eb1..0fdac30b5 100644
--- a/packages/cli/README.md
+++ b/packages/cli/README.md
@@ -435,9 +435,8 @@ set, a Claude Code launch refuses `no-session-credential` before anything
 starts. A Pi session gets the same variables through the allowlist. A Pi
 session on provider `zai` logs in with `ZAI_API_KEY`, which the allowlist
 passes. Like every allowlist variable, it reaches every session the host
-starts, Claude Code ones included, and a shell inside any of them can read
-it. A shell the harness opens, Claude Code's `Bash` or Pi's `bash`, can read
-them.
+starts, Claude Code ones included. A shell the harness opens, Claude Code's
+`Bash` or Pi's `bash`, can read all of these variables.
 
 A Pi session logs in only through the variables `ENV_ALLOW` passes. Its
 `HOME` is the run's own, so Pi never reads the operator's `~/.pi/agent`