Document the current public Arena boundary

README.md

@@ -1,8 +1,8 @@
 # Arena
 
 RL environments from Lumbridge. Apache-2.0, built to the [`verifiers`](https://github.com/PrimeIntellect-ai/verifiers)
-v1 spec so the same wheel installs from the Prime Intellect Environments Hub and runs here
-unchanged.
+v1 spec so the same wheel can run locally or, after a separate owner-approved release,
+through the Prime Intellect Environments Hub unchanged.
 
 An environment is an eval you take the gradient of. That is not a rename — it changes what
 the artifact has to carry. A benchmark's score is its output, so a benchmark can be a number
@@ -167,12 +167,16 @@ uv run --with regex python probe.py
 
 Arena contains independently published environment libraries, so per-environment
 `uv.lock` files are intentionally not committed. Redaction v0.2 pins its runtime contract
-in `pyproject.toml`; CI resolves it on Python 3.11 and 3.12, builds every environment, and
-runs the shared four-environment probe.
+in `pyproject.toml`; CI resolves it on Python 3.11 and 3.12, builds all eight public
+environments, and runs the auto-discovered probe for every one of them.
 
-## Publishing
+## Publishing (deferred)
 
-The layout mirrors `verifiers`' own, so an environment goes to the Hub without a fork:
+The layout mirrors `verifiers`' own, so an environment can eventually go to the Hub without
+a fork. No current environment is published there from this repository. Hub publication is
+an explicit owner-approved outward action; ordinary development and CI must never run it.
+
+After that separate approval, the upstream command is:
 
 ```bash
 prime env push redaction-pressure -v PUBLIC