diff --git a/README.md b/README.md
index 0bbe74f..4e5d068 100644
--- a/README.md
+++ b/README.md
@@ -215,7 +215,6 @@ The files `test.py`, `test_fernet.py`, `import.py`, and `dumpl.py` are ad-hoc sc
 
 Before any serious deployment, at minimum:
 
-1. Remove `db.sql`, `pins.csv`, and embedded credentials from version history, then rotate every exposed or recoverable credential.
 2. Move the Flask secret key, provisioning database password, database name/host, and filesystem paths to environment-based configuration.
 3. Replace string-formatted SQL with parameterized queries and validate table/account identifiers.
 4. Replace the current password-to-Fernet-key construction with a password KDF such as Argon2id, scrypt, or PBKDF2 using a unique salt and appropriate work factor.