diff --git a/.github/workflows/publish-codex-flows.yml b/.github/workflows/publish-codex-flows.yml
index 97c16c0..5cd989a 100644
--- a/.github/workflows/publish-codex-flows.yml
+++ b/.github/workflows/publish-codex-flows.yml
@@ -32,6 +32,9 @@ jobs:
           node-version: 24
           registry-url: https://registry.npmjs.org
 
+      - name: Update npm
+        run: npm install -g npm@^11.10.0
+
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
diff --git a/README.md b/README.md
index 48ef377..341ec79 100644
--- a/README.md
+++ b/README.md
@@ -76,7 +76,9 @@ bun run --filter @peezy-tech/codex-flows release:check
 ```
 
 Because the npm package does not exist yet, bootstrap the first version with a
-human npm session or short-lived npm token from the public repo checkout:
+human npm session or short-lived npm token from the public repo checkout. The
+`peezy-tech` npm organization/scope must exist first, and the publishing account
+or token must have write access to that scope:
 
 ```bash
 cd packages/codex-client
diff --git a/packages/codex-client/README.md b/packages/codex-client/README.md
index 7507947..5d2fca0 100644
--- a/packages/codex-client/README.md
+++ b/packages/codex-client/README.md
@@ -110,7 +110,7 @@ bun run --filter @peezy-tech/codex-flows release:check
 
 The release check runs package tests, type checking, a clean `dist` build, and `npm pack --dry-run`. Review the pack output before publishing so only `dist`, `README.md`, and package metadata are included.
 
-For the first publish, use a human npm session or short-lived npm token from the public `peezy-tech/codex-flows` repo checkout:
+For the first publish, use a human npm session or short-lived npm token from the public `peezy-tech/codex-flows` repo checkout. The `peezy-tech` npm organization/scope must exist first, and the publishing account or token must have write access to that scope:
 
 ```bash
 cd packages/codex-client