diff --git a/CLAUDE.md b/CLAUDE.md
index b733a25..26c0715 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -80,6 +80,21 @@ typedef struct {
 
 Tests use dynamic plans (hash algorithm availability varies by OpenSSL build). `t/fakelib/` provides a mock `Crypt::OpenSSL::Bignum` for testing without the real module.
 
+## Generated Files — Do Not Edit
+
+These files are generated and must not be manually edited or committed:
+
+- **`MANIFEST`** — Generated by `make manifest`. Do not sort or modify by hand.
+- **`README.md`** — Generated from POD via `pod2markdown RSA.pm > README.md`. Edit the POD in `RSA.pm` instead.
+
+## Release Process — Human Only
+
+Releases are performed by the maintainer. Automated fixes must **never**:
+
+- Update `Changes` / changelog entries
+- Bump the version number in `RSA.pm` or elsewhere
+- Modify release metadata (META.json, META.yml)
+
 ## Conventions & Gotchas
 
 ### Memory Management