diff --git a/README.md b/README.md
index 636df79..e422390 100644
--- a/README.md
+++ b/README.md
@@ -47,8 +47,16 @@ cd android && ./gradlew assembleRelease
 # → android/app/build/outputs/apk/release/app-release.apk
 ```
 
-Install on GrapheneOS by copying the APK over (or via Obtainium once a
-Gitea release exists).
+Install on GrapheneOS by copying the APK over, or via Obtainium.
+
+## CI (Gitea Actions)
+
+Every push to `main` runs `.gitea/workflows/release.yml`: prebuild →
+signed arm64 APK → Gitea release tagged `v1.0.<run_number>`, APK attached.
+`app.config.js` stamps `VERSION_CODE`/`VERSION_NAME` from the run number so
+each release installs as an upgrade (Obtainium-friendly).
+
+Repo secrets: `KEYSTORE_B64` (base64 of the jks), `KEYSTORE_PASSWORD`.
 
 ## iOS