diff --git a/.agent/workflows/deploy_to_production.md b/.agent/workflows/deploy_to_production.md
index 172357f..ae78068 100644
--- a/.agent/workflows/deploy_to_production.md
+++ b/.agent/workflows/deploy_to_production.md
@@ -22,6 +22,6 @@
 You should use the single bash script stored in the repository, `remote_deploy.sh`, which safely performs all these steps using secure shell arguments.
 
 ```bash
-# To safely deploy to production:
-REMOTE_PASS='a6163484a' bash /app/remote_deploy.sh
+# Agents MUST explicitly ask the USER for the production password before executing:
+REMOTE_PASS='<USER_PROVIDED_PASSWORD>' bash /app/remote_deploy.sh
 ```
diff --git a/docs/deployment_reference.md b/docs/deployment_reference.md
index 05203d1..c69a2d7 100644
--- a/docs/deployment_reference.md
+++ b/docs/deployment_reference.md
@@ -55,9 +55,9 @@
       3. Performs automated database migrations running parallel idempotent logic (`app/db/migrate.py`) via the `Uvicorn` startup lifecycle.
 
 ### How to Release
-You must safely pass the authentication key into the script from the command line:
+You or an Agent must safely pass the authentication key into the script from the command line. An Agent should **always prompt the USER** for this password before running it:
 ```bash
-REMOTE_PASS='a6163484a' bash /app/remote_deploy.sh
+REMOTE_PASS='<USER_PROVIDED_PASSWORD>' bash /app/remote_deploy.sh
 ```
 
 ---