diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 24e9a80..6af1aa3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -28,16 +28,14 @@ jobs:
     name: Security Audit
     runs-on: [self-hosted, linux, arm64]
     timeout-minutes: 10
+    permissions:
+      contents: read
+      checks: write
     steps:
       - uses: actions/checkout@v6
-      - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2
+      - uses: rustsec/audit-check@v2
         with:
-          shared-key: audit
-      - name: Install cargo-audit
-        run: which cargo-audit >/dev/null 2>&1 || cargo install cargo-audit --locked
-      - name: Run cargo audit
-        run: cargo audit
+          token: ${{ secrets.GITHUB_TOKEN }}
 
   check:
     name: Check
diff --git a/README.md b/README.md
index d82e8f5..4b60805 100644
--- a/README.md
+++ b/README.md
@@ -8,6 +8,32 @@ Part of [Dakera AI](https://dakera.ai) — the memory engine for AI agents.
 
 ---
 
+## Run Dakera
+
+You need a running Dakera server to connect to. The fastest way:
+
+```bash
+docker run -d \
+  --name dakera \
+  -p 3300:3300 \
+  -e DAKERA_ROOT_API_KEY=dk-mykey \
+  ghcr.io/dakera-ai/dakera:latest
+```
+
+For persistent storage (recommended):
+
+```bash
+curl -sSfL https://raw.githubusercontent.com/Dakera-AI/dakera-deploy/main/docker-compose.yml \
+  -o docker-compose.yml
+DAKERA_API_KEY=dk-mykey docker compose up -d
+
+curl http://localhost:3300/health  # → {"status":"ok"}
+```
+
+Full deployment guide (Docker Compose, Kubernetes, Helm): [dakera-deploy](https://github.com/Dakera-AI/dakera-deploy)
+
+---
+
 ## Install
 
 ```bash