diff --git a/README.md b/README.md
index c706589..11246c5 100644
--- a/README.md
+++ b/README.md
@@ -22,3 +22,10 @@ These skills take the mailbox email address, mint a temporary Mailu user token
 through the admin API, use it as the SMTP/IMAP password, and delete the token
 before returning. The token is not exposed to the model or returned in skill
 responses.
+
+Runtime note: the hosted agent must be allowed to reach Mailu submission and
+IMAPS. The cluster NetworkPolicy in `runtime-infra/mailu.yaml` allows only the
+`mailu-openapi-agent` Knative service in the `agents` namespace to connect to
+`mail.a2acloud.io` on ports `587` and `993`. Other cluster workloads should
+remain blocked from those ports unless they receive their own explicit policy
+exception.
diff --git a/__pycache__/agent.cpython-312.pyc b/__pycache__/agent.cpython-312.pyc
new file mode 100644
index 0000000..e40ef8a
Binary files /dev/null and b/__pycache__/agent.cpython-312.pyc differ