diff --git a/README.md b/README.md
index 1e54cda..eb66cd9 100644
--- a/README.md
+++ b/README.md
@@ -123,7 +123,9 @@ veth IPs aren't routable off the host and Warp forwards no inbound traffic.
 - `bin/netvm-cdp.sh <profile>` — print the CDP endpoint + SSH forward.
 - `bin/netvm-cdp-relay.py` — veth-IP→loopback TCP relay for CDP (pidfile-supervised).
 - `bin/netvm-names.sh` — shared naming: netns, hashed iface tags, veth subnet, CDP port.
-- NODES.md — the registry: node -> netns -> Warp identity -> egress IP.
+- NODES.md — the network registry: profile/node -> netns -> Warp identity -> veth IP -> CDP port -> egress IP.
+- ACCOUNTS.md — the secret-free login registry: login -> profile/node -> purpose -> auth state (no credentials, ever).
+- `bin/netvm-accounts.sh` — operator view: registry joined with live node state.
 
 ## Verification checklist