diff --git a/README.md b/README.md
new file mode 100644
index 0000000..a27c0b2
--- /dev/null
+++ b/README.md
@@ -0,0 +1,3 @@
+# radius-token
+
+> ⚠️ **Demo code — not production-ready.** Provided as-is, without warranty, and may contain known, unpatched vulnerabilities (including in dependencies). If you reuse it, run your own security and supply-chain scans and patch before deploying.