diff --git a/agents.md b/agents.md
index 9c54f85..c438683 100644
--- a/agents.md
+++ b/agents.md
@@ -295,3 +295,4 @@ If you want, next we can:
 - User: `admin` / password `admin`.
 - Network: DHCP on primary interface (e.g., `ensp1s0` in VM); SSH reachable once IP obtained.
 - Purpose: sandbox for validating flake changes before baking into the ISO.
+- Workflow: sync repo to VM and `nixos-rebuild switch --flake /etc/nixos#installer`; rebuild ISO **only on explicit request** (ISO must remain hardware-agnostic, no embedded host-specific files).