diff --git a/docs/agents/overview.mdx b/docs/agents/overview.mdx
index 56968ad..06205f2 100644
--- a/docs/agents/overview.mdx
+++ b/docs/agents/overview.mdx
@@ -1,15 +1,13 @@
 ---
 title: "Agents overview"
-description: "The `insta` skill, the MCP server, and the governance model for agents."
+description: "How agents connect: the `insta` skill and the MCP server."
 ---
 
 InstaCloud is agent-native: the stack is designed so that everything you can do in the console, an agent can do through the `insta` CLI or an MCP tool call. These are the pieces that make it true:
 
 - **[Agent setup](/agents/setup).** One command, `insta setup agent`, installs the skill and registers the MCP server for the agents on your machine.
-- **[The `insta` skill](/agents/skills).** Teaches terminal agents (Claude Code, Cursor, Codex, and others) the workflow: check `insta status`, work on a branch, pull secrets through the seam, deploy, relay approval requests.
+- **[The `insta` skill](/agents/skills).** Teaches terminal agents (Claude Code, Cursor, Codex, and others) the workflow: check `insta status`, work on a branch, pull secrets through the seam, deploy.
 - **[MCP server](/agents/mcp-server).** `https://mcp.instacloud.com/mcp` exposes the `insta_*` toolset ([reference](/reference/mcp-tools)) over streamable HTTP, authenticated with OAuth or an `insta_` API token. Explicit `projectId` and `branch` arguments let an agent operate on any project its token can see, no linked directory required.
 - **[One branch per task](/agents/branch-per-task).** An agent task gets its own branch: its own database with real data, its own storage, its own compute URL. Mistakes stay on the branch and get deleted with it.
-- **[Gated actions](/reference/gated-actions).** A gated action returns an approval ID instead of executing; a human admin approves or denies, and grants are single-use and audited. Set the policy before the agent starts: `insta policy set project.delete approve`.
-- **[Observe hook](/reference/cli/overview#observe).** Linking a repo (`insta project create` or `insta project link`) adds a credential audit on agent tool calls that writes findings to `.insta/audit.jsonl`.
 
-Mix CLI and MCP freely; both hit the same API under the same governance.
+Run `insta setup agent` once, and any operation on your projects, from provisioning a database to deploying compute, is one your agents can run. Mix CLI and MCP freely; both hit the same API.