Restrict published environment files to the root example

1 files changed, 2 insertions, 1 deletions

diff --git a/docs/POLICY.txt b/docs/POLICY.txt
index f9e3614..592269b 100644
--- a/docs/POLICY.txt
+++ b/docs/POLICY.txt
@@ -31,7 +31,8 @@ PROJECT CONVENTIONS
     Rust documentation attributes provide crate metadata without comments.
 
     Keep configured secrets only in the root .env. Never commit .env or var/.
-    .env.example lists required keys with placeholders. Public hostnames,
+    Only the root .env.example is published; environment variants and nested
+    examples are ignored. .env.example lists required keys with placeholders. Public hostnames,
     public GPG keys, paths, configuration, and source belong in Git.
     TLS account/certificate private keys, databases, and other generated
     private state are persistent data in var/data, not .env configuration.