diff --git a/POC_AUTHORIZED_DELETE_ME.md b/POC_AUTHORIZED_DELETE_ME.md
new file mode 100644
index 0000000..1a70ce8
--- /dev/null
+++ b/POC_AUTHORIZED_DELETE_ME.md
@@ -0,0 +1,3 @@
+Authorized command-injection PoC for .github/workflows/redirect-external-pr.yml.
+Harmless: the branch name prints a marker (CMDI_POC_OK) to the Actions log.
+Sanctioned by the repo owner. Safe to close this PR and delete the branch.