diff --git a/current/publication-policy.md b/current/publication-policy.md
new file mode 100644
index 0000000..13da37b
--- /dev/null
+++ b/current/publication-policy.md
@@ -0,0 +1,3 @@
+# Publication policy
+
+Only curated `.md`, `.txt`, and `.json` documents may be published. Credentials, private keys, authorization headers, private network details, private filesystem paths, raw evidence archives, and private repository contents must not be included.