diff --git a/DECISIONS.md b/DECISIONS.md
new file mode 100644
index 0000000..b1332c7
--- /dev/null
+++ b/DECISIONS.md
@@ -0,0 +1,8 @@
+# a list of architectural decisions
+
+( to remind me when I over-engineer and be fickle minded )
+
+## Image is NOT meant to be exposed directly to the internet
+
+- the defaults MUST take care of this
+- and hence AUTH won't be a part of the image, whatever the user is using for reverse proxy should handle auth.
diff --git a/README.md b/README.md
index 9645061..c8eb2be 100644
--- a/README.md
+++ b/README.md
@@ -5,8 +5,6 @@ Private self-hosted Excalidraw with Bun, Caddy, and SQLite.
 This is bare wrapper around the excalidraw packages that adds autosave and disk-persistence.
 No auth to keep things simple - you either run in a private network or put it behind Caddy auth or similar solutions.
 
-> GPT 5.5 generated
-
 ## Tl;dr
 
 When building the image yourself