diff --git a/scripts/README.md b/scripts/README.md
new file mode 100644
index 0000000..aa95238
--- /dev/null
+++ b/scripts/README.md
@@ -0,0 +1,19 @@
+# Host scripts (scaffold)
+
+**Status:** Documented entrypoints only — no executable bodies until **build**.
+
+All scripts must wrap **`nemohermes` / `openshell` / Docker**. No parallel control API.
+
+## Intended entrypoints
+
+| Script | Role |
+|--------|------|
+| `bootstrap.sh` | Host prereqs; install Docker if missing |
+| `install.sh` | Stages S0b–S6 |
+| `upgrade.sh` | Snapshot, pull pins, migrate, re-apply policy, doctor |
+| `doctor.sh` | Health checks |
+| `connect/*.sh` | Operator connect helpers (Square, QBO, Vagaro, channels) |
+| `install/` | Stage helpers |
+| `lib/` | Shared shell helpers |
+
+See [docs/INSTALL.md](../docs/INSTALL.md), [docs/UPGRADE.md](../docs/UPGRADE.md), [design/updates-lifecycle.md](../design/updates-lifecycle.md).