diff --git a/README.md b/README.md
index 33110f6..b630fae 100644
--- a/README.md
+++ b/README.md
@@ -24,4 +24,4 @@ The workflows in `.gitea/workflows/` pin a specific `eec-campaigns` version (cur
 
 ## Sending as hello@cateconners.com
 
-Listmonk sends everything — every domain's campaigns — authenticated as one shared identity, `hello@reground.org`. For a campaign here to actually go out `From: hello@cateconners.com` instead of bouncing as a spoofing attempt, Mailcow's Sender ACL on `hello@reground.org` has to explicitly allow it — confirm this is in place (see `reground-infrastructure`'s `campaigns-cateconners` role, which flags it as a manual step) before relying on a real send.
+Listmonk sends everything — every domain's campaigns — authenticated as one shared identity, `hello@reground.org`. For a campaign here to actually go out `From: hello@cateconners.com` instead of bouncing as a spoofing attempt, Mailcow's Sender ACL on `hello@reground.org` has to explicitly allow it — this is set automatically by `reground-infrastructure`'s `mailcow` role (it derives the full Sender ACL from `mailcow_mailboxes`, so any co-hosted client's `hello@` mailbox is covered without a manual step).