diff --git a/docs/AGENT_LOOP.md b/docs/AGENT_LOOP.md
index 600ece0b..a5057c29 100644
--- a/docs/AGENT_LOOP.md
+++ b/docs/AGENT_LOOP.md
@@ -50,6 +50,12 @@ families carry all the state — check both before acting:
     (engine behavior, breaking syntax). Neither agent touches a parked
     issue.
 
+  Outside filings — a `field-report` Issue filed by anyone other than the
+  repo owner — are parked this way automatically: relabelled `owner:don` +
+  `status:needs-approval` because the loop runs as one GitHub login and must
+  not act unattended on third-party text in a public repo. The maintainer
+  reviews these first and decides whether to hand them to the loop.
+
 Two built-in GitHub labels close a ticket without a fix:
 
 - **`wontfix`** — the implementer's call, with a reason in a comment; issue
@@ -83,4 +89,4 @@ Whether you're a human or another agent:
   reproduces the fix — not by reading the diff.
 
 See the `iterate` repo's `CLAUDE.md` for the full protocol this is
-summarized from, including how the automated loop itself is run.
+summarized from, including how the automated loop itself is run.
\ No newline at end of file