commit 21cb94baaf7a6fd125153c7b2bb91c839b87f174
Author: Rick Pat <r-pat@krusty.local>
Date:   Thu Sep 4 09:41:03 2025 +0000

    docs: describe the layout

diff --git a/README.md b/README.md
new file mode 100644
index 0000000..ebbe5e1
--- /dev/null
+++ b/README.md
@@ -0,0 +1,16 @@
+# relay-tooling
+
+Operator tooling for the Chum Bucket Relay link.
+
+## Layout
+
+    deploy/relay.sh      bring the tunnel up on a fresh jump host
+    bin/healthcheck.sh   probe the relay and exit non-zero if it is down
+    bin/rotate-token.sh  ask the relay to mint a new operator token
+    .env.example         copy to .env and fill in, never commit the result
+
+## Notes
+
+Credentials live in `.env`, which is gitignored. If you need a token, run
+`bin/rotate-token.sh` against a host you control rather than copying one out of
+a running box.