diff --git a/README.md b/README.md
index 6e65540..d4afbbd 100644
--- a/README.md
+++ b/README.md
@@ -26,3 +26,9 @@ Git origin: https://git.labyricorn.com/Labyricorn/labyricorn-site.git
 Production branch: main
 Credential purpose: authenticated private repository access
 Credential location: /srv/labyricorn/.netrc (mode 0600)
+
+## Future admin workflow
+
+The production deployment account has authenticated Git write access so a future
+local-only administration workflow can commit and push content changes. Lektor
+does not push automatically; that operation must remain explicit and controlled.