diff --git a/AGENTS.md b/AGENTS.md
index 813284e84efaceec876f7969bf8d2d8acecbbb04..c32ff212b830b6fd629b1cf777a44e8ca7e0e432 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -9,6 +9,15 @@ SPDX-License-Identifier: CC0-1.0
 This file guides LLM agents through interacting with and maintaining
 the lune project—a CLI for the Lunatask productivity app.
 
+## Lunatask concepts
+
+Lunatask is end-to-end encrypted and any sensitive information
+(person/task/note/habit names, contents, etc.) is all omitted. The API
+only returns basic metadata (IDs, timestamps, status, etc.). That also
+means there is no way to dynamically list the user's areas, habits, or
+notebooks; they must copy those details from the desktop app into lune
+during interactive initialisation or reconfiguration.
+
 ## Commands
 
 Run these most to least often:
@@ -84,12 +93,6 @@ Reference docs via context7 or doc-agent when unsure:
 
 ## Gotchas
 
-### Lunatask E2E encryption
-
-Task/note names and content are end-to-end encrypted in Lunatask. The API only
-returns metadata (IDs, timestamps, status). See `cmd/task/list.go:17-20` for the
-documented limitation.
-
 ### Linter exclusions for cmd/
 
 The `.golangci.yaml` disables several linters for `cmd/`: