diff --git a/README.md b/README.md
index 1e4118a..88929dc 100644
--- a/README.md
+++ b/README.md
@@ -31,7 +31,9 @@ jobs:
 
 | Workflow | Description |
 |----------|-------------|
-| `opentofu.yml` | OpenTofu/Terraform CI/CD with plan comments and apply on merge |
+| `opentofu.yml` | OpenTofu/Terraform CI/CD with PR validation and an environment-gated apply on every push to `main` |
+
+Same-repository PRs run tests and a credentialed plan; fork PRs run tests only. A push to `main` runs tests followed by a fresh apply, which does not reuse the PR plan.
 
 ## Runners