fix: rename docker-compose volume vars to MEMORY_OS_* prefix

B3.1 — CRITICAL: docker-compose.yml inherited host env vars
(WIKI_PATH, HERMES_HOME, FABRIC_DIR), causing dev stacks to
accidentally mount production volumes.

Fix:
- docker-compose.yml: ~/Vault/wiki →
- docker-compose.yml: ~/.hermes →
- docker-compose.yml: ~/Vault/fabric →
- .env.example: document new vars with safety warning
- install.md: add optional volume override section with ⚠️ note

Fallback defaults (./wiki, ./hermes, ./fabric) are preserved —
zero-config dev setup still works out of the box.

.env.example

@@ -100,6 +100,15 @@ COLLECTION_NAME=knowledge_base
 # Docker: wiki mount path inside worker container
 # WIKI_PATH=/wiki
 
+# ── Docker Compose volumes ─────────────────────────────
+# These override the host paths mounted into the worker container.
+# If unset, docker-compose uses relative paths (./wiki, ./hermes, ./fabric)
+# which are safe defaults for development. Set these ONLY if you need
+# to point the Docker stack at existing production directories.
+# MEMORY_OS_WIKI_PATH=/home/your-user/vault/wiki
+# MEMORY_OS_HERMES_HOME=/home/your-user/.hermes
+# MEMORY_OS_FABRIC_DIR=/home/your-user/vault/fabric
+
 # Logging
 # LOG_LEVEL=INFO
 # CURATOR_LOG_LEVEL=INFO

docker/docker-compose.yml

@@ -71,9 +71,9 @@ services:
       ARQ_KEEP_RESULT: "3600"
       LOG_LEVEL: ${LOG_LEVEL:-INFO}
     volumes:
-      - ${WIKI_PATH:-./wiki}:/wiki:ro
-      - ${HERMES_HOME:-./hermes}:/hermes:rw
-      - ${FABRIC_DIR:-./fabric}:/fabric:rw
+      - ${MEMORY_OS_WIKI_PATH:-./wiki}:/wiki:ro
+      - ${MEMORY_OS_HERMES_HOME:-./hermes}:/hermes:rw
+      - ${MEMORY_OS_FABRIC_DIR:-./fabric}:/fabric:rw
 
 volumes:
   redis_data:

setup/install.md

@@ -100,6 +100,14 @@ COLLECTION_NAME=knowledge_base
 LOG_LEVEL=INFO
 EOF
 
+# Optional — if you want the Docker stack to use your existing production
+# directories instead of local test volumes, uncomment and set these:
+# MEMORY_OS_WIKI_PATH=/home/your-user/vault/wiki
+# MEMORY_OS_HERMES_HOME=/home/your-user/.hermes
+# MEMORY_OS_FABRIC_DIR=/home/your-user/vault/fabric
+# ⚠️  Do NOT set these to production paths unless you understand the risk.
+#     The worker mounts /fabric and /hermes as read-write.
+
 # Start the stack
 docker compose up -d
 ```