diff --git a/README.md b/README.md
index ed89040..3b04ba5 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,16 @@ confidence; nothing is guessed.
   Never on Vercel (long jobs). Bypass/stealth/proxy-rotation/fake-account paths are excluded
   by design (CLAUDE.md §1).
 
+> ⚠️ **The exclusion above is the POLICY, not the current state of this tree.**
+> `services/scrapers/` still contains 64 files implementing exactly what CLAUDE.md §1
+> prohibits — curl_cffi TLS impersonation, cloudscraper, Tor rotation, `WAFBypass`,
+> `ProxyRotator` — plus committed `__pycache__/*.pyc`. They arrived on the Gitea line on
+> 2026-07-13 and are documented in [docs/06-data-engine.md](docs/06-data-engine.md).
+> [PR #1](https://git.siax.io/sax3l/0pt/pulls/1) exists to delete them and has been open
+> since 2026-07-19. Nothing in the TypeScript tree imports them and they are not copied
+> into the runner stage, so they do not execute — but they are present, and this README
+> previously read as if they were not.
+
 ## Routes
 
 | Area | Routes |