diff --git a/README.md b/README.md
index 7c439f9..2ed9c6f 100644
--- a/README.md
+++ b/README.md
@@ -181,6 +181,8 @@ const result = await sdk.createKey({
 });
 ```
 
+Use a fresh random UUID for each operation and reuse it only to retry that same operation. Never derive it from the license key or host ID: a replay returns the original response, including floating-session secrets.
+
 ## License
 MIT