diff --git a/README.md b/README.md
index 75bac17..485ac8b 100644
--- a/README.md
+++ b/README.md
@@ -32,3 +32,10 @@ Branch protection: take the exact status-check name from the first PR run. Renam
 ## Versioning
 
 Only major tags (`v1`, `v2`, …). Fixes and new optional inputs move the existing tag. Changing or removing inputs, or changing behavior, needs a new major tag.
+
+## Entscheidungen
+
+Decisions by the owner of the `templates` org:
+
+- 2026-10-15: Only major tags (`v1`, `v2`, …), no `vX.Y.Z` tags (see Versioning).
+- 2026-10-17: All repos in the `templates` org are public, so consumers' runners can fetch them without credentials. They never contain secrets or internal addresses: secrets come in as `secrets:`, hosts as inputs.