diff --git a/mobile/src/native-shell.js b/mobile/src/native-shell.js
index 20d71e7..df6646d 100644
--- a/mobile/src/native-shell.js
+++ b/mobile/src/native-shell.js
@@ -1,6 +1,10 @@
 // native-shell.js — the iOS/Android-only layer. Bundled by esbuild into www/native-shell.js
 // and injected ONLY into the app bundles, never served to the website.
 //
+// Editing this file, or anything under server/public, puts the shipped apps behind the
+// website: they carry a copy of the UI taken at build time. A push rebuilds them on the
+// ingest Mac and emails to say so, but shipping is still ./release.sh --ios --android.
+//
 // Two jobs:
 //   1. Publish the Capacitor plugins on window.CapPlugins, synchronously, before
 //      native-bridge.js and app.js parse. That's why this is bundled as an IIFE and loaded