diff --git a/deploy/README.md b/deploy/README.md
index 9c371c1..7b83a77 100644
--- a/deploy/README.md
+++ b/deploy/README.md
@@ -19,6 +19,12 @@
 > ckn-bw** — the two would fight over file ownership, sudoers, and unit
 > definitions. The script remains useful as concrete documentation of the
 > install steps the bundle now performs declaratively.
+>
+> **Verbatim-shipped files**: when a row in the table below says "shipped
+> verbatim by the bundle," the only deploy step for changes to that file is
+> to re-sync the matching path in `ckn-bw/bundles/left4me/files/…` and run
+> `bw apply ovh.left4me`. No new group / user / unit work needed unless the
+> change itself introduces one.
 
 ## What lives here (and what corresponds to it in ckn-bw)