diff --git a/docs/migration/README.md b/docs/migration/README.md
index 63190dd..8f305a3 100644
--- a/docs/migration/README.md
+++ b/docs/migration/README.md
@@ -4,8 +4,18 @@ CSOC-WP-0001-T02/T04 home for Bubble → rebuild mapping and rehearsal notes.
 
 | Doc | Status |
 |-----|--------|
-| `schema-mapping-sketch-2026-08-12.md` | Provisional mapping from inventory + ADR-0002 (no dump yet) |
-| *(later)* export manifest | Bubble dump paths, checksums, PII handling |
-| *(later)* rehearsal log | Import of one space to app host |
+| `bubble-auth-and-export.md` | **Safe read access for agents** (session file; no secrets in chat) |
+| `schema-mapping-sketch-2026-08-12.md` | Provisional mapping (update after export; target ADR-0003/0004) |
+| *(later)* field-level map | After authenticated dump |
+| *(later)* rehearsal log | Import of one space to thin git tree (ADR-0004) |
+
+## Auth for automated export
+
+```bash
+./scripts/capture-auth-state.sh    # you log in once (or --from-password-files)
+./scripts/export-bubble-session.sh # dump routes/network under XDG auth dir
+```
+
+Do **not** paste passwords into chat. Details: `bubble-auth-and-export.md`.
 
 Export credentials and raw dumps **never** go in git.