diff --git a/README.md b/README.md
index ce76311..d47844f 100644
--- a/README.md
+++ b/README.md
@@ -61,3 +61,8 @@ never retry the original effect merely because its caller state is incomplete.
 For Dataflow, a database-only run is atomic. A published-output run is forward
 recovery: inspect its recorded output digest and sink idempotency key, and do
 not start another publication while its state is `outcome_unknown`.
+For Workflow Engine, Ops exposes the action operation and evidence chain while
+the Workflow handoff remains the reconciliation surface. Verify the provider,
+then record **Effect confirmed** to continue without replay or **Effect absent**
+to enable a deliberate retry. Instance, trigger-delivery, and timer leases show
+which runtime currently owns transition authority across hosts.