diff --git a/.env.example b/.env.example
index f8d07ea..3b801ad 100644
--- a/.env.example
+++ b/.env.example
@@ -47,6 +47,16 @@ RESEND_WEBHOOK_SECRET=
 # Any long random string; in production the x-vercel-cron header is also accepted.
 CRON_SECRET=
 
+# ⚠ SAFETY SWITCH — automatic outreach email. LEAVE UNSET (or "false").
+# By default the cron does NOTHING: a due follow-up stays in "Due today" until a
+# human sends it from the gated composer — outreach email is human-only.
+# Setting this to "true" makes /api/crm/cron/tick AUTOMATICALLY SEND up to 3
+# follow-up emails per lead with no human in the loop (it still honors the
+# suppression list, OUTREACH_DAILY_CAP, and OUTREACH_DOMAIN_VERIFIED, but those
+# are the ONLY remaining gates). Do not enable unless you explicitly want
+# autonomous sending. See src/app/api/crm/cron/tick/route.ts.
+OUTREACH_AUTO_SEQUENCE=false
+
 # ── Optional: extra integrations ─────────────────────────────────────────────
 
 # Google PageSpeed Insights key — raises the rate limit on website audits.