diff --git a/CLAUDE.md b/CLAUDE.md
index 86440b3..20fb973 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -58,6 +58,15 @@ The active store directory is picked by `resolve_store()` using these rules, hig
 
 `.secrets-store` parsing is deliberately conservative: first non-empty non-comment line wins, no shell expansion (no `$VAR`, `$()`, backticks). Bare names map via `_expand_store_path`: `work` → `$HOME/.secrets-work`, `default` → `$HOME/.secrets`.
 
+## Deploy Configuration
+
+- Platform: NONE (distributed via `git clone` from GitHub)
+- Production URL: N/A (no live service)
+- Release model: merge to `main` is the release. Optionally tagged with `v<X.Y.Z.W>`.
+- Verification after merge: a fresh `git clone` should produce a working `secrets which` against an isolated `$HOME`. No canary URL.
+- Staging: none.
+- Rollback: revert the merge commit on `main` (and delete the tag) to roll back.
+
 ## Environment variable
 
 `SECRETS_DIR` overrides the default `~/.secrets` location (useful for testing). Per-project bindings via `.secrets-store` file beat this env var; use `--store <dir>` for one-shot overrides that beat everything.