diff --git a/tools/grav-publish.sh b/tools/grav-publish.sh
index 8a4f584..96e7199 100755
--- a/tools/grav-publish.sh
+++ b/tools/grav-publish.sh
@@ -59,7 +59,7 @@ DASH=$(mktemp)
 mkdir -p "$PAGES"
 mv "$DASH" "$PAGES/page.md"
 
-# ---------- reports ----------
+# ---------- reports (WHITELIST: public content only — NEVER revenue/expense detail, see hub README transparency policy)
 for report in report-amt-power-telemetry report-moonlight-desktop; do
   R=$(mktemp)
   { fm "$report"; sed -n '/^# /,$p' "$REPO_ROOT/docs/$report.md"; } > "$R"