diff --git a/ship.sh b/ship.sh
index 766c4da..f502087 100755
--- a/ship.sh
+++ b/ship.sh
@@ -1,5 +1,9 @@
 #!/usr/bin/env bash
 #
+# Do NOT add docker login or gh auth token here. A prior gh-based login overwrote good GHCR
+# credentials and pushes failed with permission_denied / wrong scopes; compose push works when
+# Docker keeps the PAT/credential helper the user already configured.
+#
 # Fixed pipeline (order is fixed):
 #   1. git add -A
 #   2. git commit (or --allow-empty if nothing staged)