Remove the knowledge path until it's supported.

docs/architecture.md

@@ -148,6 +148,13 @@ Required package files:
 
 The server validates the package at startup. Channel agent IDs must match declared agents. Knowledge sources currently support Google Drive and Microsoft OneDrive declarations.
 
+A declaration is not a connection. Google Drive can be configured from `/admin/connectors`, which
+stores the credential and writes the connector instance; OneDrive has no setup screen yet. No
+connector adapter or sync schedule exists yet either, so the `documents`, `chunks` and
+`document_acls` tables stay empty and a built-in coworker has nothing of its own to search. The
+retrieval path that works today is an MCP tool granted to a Bot: it is handed to the model as a
+server-executed tool and every call goes through the grant, the policy engine and the audit trail.
+
 Connector credentials are stored through the credential vault and referenced by id, not stored inline in YAML.
 
 ## Security boundaries

docs/configuration.md

@@ -267,7 +267,7 @@ agents:
   - id: knowledge
     name: Knowledge
     title: Company Knowledge
-    role_description: Answer company knowledge questions and cite sources.
+    role_description: Help answer company knowledge questions and cite sources when available.
     avatar_seed: knowledge
     type: built-in
     system_prompt: Answer from authorized company knowledge and cite your sources. When none is connected, say so plainly rather than inventing a citation.
@@ -327,7 +327,13 @@ sources:
     roots: [Risk, Operations]
 ```
 
-Supported source types are `google-drive` and `microsoft-onedrive`.
+Supported source types are `google-drive` and `microsoft-onedrive`. This file declares what a
+deployment is allowed to connect, not what it has connected. Google Drive can be configured from
+`/admin/connectors`, which stores the service-account credential and creates the connector
+instance; Microsoft OneDrive has no setup screen yet and that page says so rather than showing a
+dead control. Neither type has a sync running behind it yet, so a declared source contributes no
+documents. A coworker that has to search and cite today does it through an MCP tool granted from
+`/admin/plugins`, which executes here through the grant, the policy and the audit row.
 
 ## Change workflow