diff --git a/tools/grav-publish.sh b/tools/grav-publish.sh
index b538e78..a7e48ed 100755
--- a/tools/grav-publish.sh
+++ b/tools/grav-publish.sh
@@ -143,11 +143,14 @@ read-only** — performance data, benchmarks, risk intelligence,
 architecture and decision reports are all in the open.
 
 **The principle**: our code, formulas, and methodology are open; the
-inputs to them are not. Revenue and expense detail (contract rates,
-system costs, billing history, per-tenant margins, customer data) is
-private to LLC members and is never published here. This line is enforced
-mechanically: the publishing script redacts private literals from every
-public page at render time — see
+inputs to them are not. **This site is assumed 100% public** — nothing is
+published here that isn't safe for the open internet. Revenue and expense
+detail (contract rates, system costs, billing history, per-tenant
+margins, customer data) is private to LLC members and lives in our ERP:
+private financial dashboards and reports are built in Dolibarr
+(SSO + role-gated), as part of this same program — never on this site.
+The public/private line is enforced mechanically: the publishing script
+redacts private literals from every public page at render time — see
 [`grav-publish.sh`](https://git.knownelement.com/KNEL/KNELPerf/src/branch/main/tools/grav-publish.sh).
 Public market signals (e.g. ERCOT prices) are open data and stay open.