diff --git a/apps/desktop/README.md b/apps/desktop/README.md
index 2c603ce..7f380dc 100644
--- a/apps/desktop/README.md
+++ b/apps/desktop/README.md
@@ -147,7 +147,7 @@ CORS is not authentication or tenant isolation. The backend must continue to enf
 
 ## Limitations and support boundary
 
-- No native Windows shell, installer, update channel, signed binary, or Windows-specific telemetry is currently checked in.
+- The native Electron Windows shell and packaging configuration are checked in, but no signed Windows installer or portable `.exe` is included in this source checkout.
 - The desktop has the web client's pilot limitations: SQLite/in-process jobs are not durable or horizontally scalable; SSE, live external discovery, production DNS/availability, production egress isolation, and production outreach delivery are not implemented.
 - The current password fallback is development-grade; production still requires Argon2id, MFA, CSRF protection, rate limiting, durable audit/retention, and tested backup/restore procedures.
 - Network loss, API version skew, expired sessions, proxy policy, certificate interception, sleep/resume, and WebView runtime updates can affect the client. The desktop cannot repair backend data or bypass a blocked safety gate.