diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 33a2361..f51f327 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,8 +1,9 @@
 # Publishes a GitHub release when a version tag (v0.1.0, ...) is pushed:
 # the ad-hoc signed app as NetScanner-<version>.zip, with that version's
 # CHANGELOG section as the notes. The Homebrew cask in
-# Criseda/homebrew-tap points at this zip; bump its version and sha256
-# (printed in the job log and the release notes) after each release.
+# Criseda/homebrew-tap points at this zip. The tap's daily Bump workflow
+# notices the new release and opens a PR with the cask's new version and
+# sha256 within a day; review and merge it there.
 name: Release
 
 on:
diff --git a/AGENTS.md b/AGENTS.md
index 067283f..393a0e1 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -233,8 +233,10 @@ Like the engine repo, every user-facing change gets an entry under
   tag runs `.github/workflows/release.yml`, which checks the tag
   against `MARKETING_VERSION` and a `## <version>` CHANGELOG section,
   builds with `Scripts/package-release.sh` and publishes
-  `NetScanner-<version>.zip`; then bump the cask's `version` and
-  `sha256`. The app is ad-hoc signed, not notarized (no paid developer
+  `NetScanner-<version>.zip`. Within a day the tap's daily Bump
+  workflow (`.github/workflows/bump.yml`) sees the release through
+  livecheck and opens a PR with the cask's new `version` and `sha256`;
+  review and merge it. The app is ad-hoc signed, not notarized (no paid developer
   account yet), so the official `homebrew/cask` tap will not take it
   and users allow the first launch in Privacy & Security.
 - **Developer ID** (later, needs a paid developer account): sign,