diff --git a/README.md b/README.md
index bd8a65e..69829d3 100644
--- a/README.md
+++ b/README.md
@@ -17,9 +17,7 @@ attached to other agent tooling as an MCP server.
   entitlement. There is no other account provider.
 - **Credentials stay on your machine.** Account tokens are stored locally only, are never sent to
   any server operated by this project, and the AI features cannot read them.
-- **Playing online requires a Microsoft account.** A local offline profile performs no Microsoft
-  authentication and contacts no Microsoft or Mojang service; it exists for local and
-  isolated-network testing only and is not an online-play path.
+- **Online play requires a Microsoft account and a valid game entitlement.**
 - ULL does not distribute, mirror, proxy or modify any Minecraft game files.
 - Not affiliated with Mojang or Microsoft.
 
@@ -109,7 +107,7 @@ The eight modules of `crates/core`:
 | `download` | multi-source health scoring, mirrors, chunked downloads, hash-while-downloading |
 | `game` | version / instance repository, snapshots and inheritance resolution |
 | `launch` | 10-stage launch pipeline, processes, JSONL event stream |
-| `auth` | Microsoft sign-in / local offline profiles |
+| `auth` | Microsoft sign-in (OAuth 2.0 device code → Xbox Live → XSTS → Minecraft Services) |
 | `addon` | mod loader installation, modpacks, CurseForge / Modrinth |
 | `diagnose` | five signal collectors, YAML rule engine, hs_err parsing |
 | `platform` | OS abstraction: paths, processes, file locks, capability probing, runtime OS detection |
@@ -153,10 +151,11 @@ Dependency license check (optional locally, required in CI):
 
 ## CI gates
 
-Every push runs fmt / clippy (warnings are errors) / the full test suite, and the Linux headless
-render smoke is a hard gate on the same footing: a red result blocks the merge. The macOS runtime
-probe is not there yet — it only runs on a manual `workflow_dispatch` and its result is recorded,
-not enforced (`continue-on-error`), until the slot passes a first run on a real runner.
+Every push to `main` and every pull request runs fmt / clippy (warnings are errors) / the full test
+suite, and the Linux headless render smoke is a hard gate on the same footing: a red result blocks
+the merge. The macOS runtime probe is not there yet — it only runs on a manual `workflow_dispatch`
+and its result is recorded, not enforced (`continue-on-error`), until the slot passes a first run on
+a real runner.
 
 | Workflow | Content |
 |----------|---------|
diff --git a/README.zh-CN.md b/README.zh-CN.md
index daafbd2..394def8 100644
--- a/README.zh-CN.md
+++ b/README.zh-CN.md
@@ -14,8 +14,7 @@ Unlucky Launcher（ULL）是一个用 Rust 写的免费开源 Minecraft: Java 
 - **只走 Microsoft 正版登录**：认证是 Microsoft OAuth 2.0 device code flow → Xbox Live → XSTS →
   `api.minecraftservices.com`，用的是玩家自己的 Microsoft 账户与自己已购的游戏权益，没有别家账户通道。
 - **凭据只存本机**：账户令牌只保存在本机，不上传本项目运营的任何服务器，AI 功能也读不到。
-- **联机游玩必须使用 Microsoft 账户**：本地离线档案不做 Microsoft 认证、不连任何 Microsoft / Mojang
-  服务，仅限本地与隔离网络环境的测试，它不是联机游玩的门路。
+- **联机游玩需要 Microsoft 账户与有效的游戏权益。**
 - 不分发、不镜像、不代理、不修改任何 Minecraft 游戏文件。
 - 与 Mojang、Microsoft 无关联。
 
@@ -95,7 +94,7 @@ Unlucky-Launcher (cargo workspace)
 | `download` | 多源健康度、镜像、分块下载、边下边算 |
 | `game` | 版本/实例仓库、快照与继承解析 |
 | `launch` | 10 阶段启动管线、进程、JSONL 事件流 |
-| `auth` | Microsoft 正版登录 / 本地离线档案 |
+| `auth` | Microsoft 正版登录（OAuth 2.0 device code → Xbox Live → XSTS → Minecraft Services） |
 | `addon` | 加载器安装、整合包、CurseForge / Modrinth |
 | `diagnose` | 五类信号采集、YAML 规则引擎、hs_err 解析 |
 | `platform` | OS 抽象：路径、进程、文件锁、能力探测、运行期 OS 检测 |
@@ -134,9 +133,9 @@ cargo build --release                                  # 三个 bin 都落在 ta
 
 ## CI 门禁
 
-每次推送都跑 fmt / clippy（warnings 视为错误）/ 全量测试，Linux 无头渲染冒烟与它们同级、是硬门禁：
-红了就不许合。macOS 运行期探针还不算——它只在手动 `workflow_dispatch` 时跑，结果留证据但不作为
-流水线结论（`continue-on-error`），直到该槽位在真实 runner 上首跑通过。
+每次推送到 `main` 与每个 PR 都跑 fmt / clippy（warnings 视为错误）/ 全量测试，Linux 无头渲染冒烟
+与它们同级、是硬门禁：红了就不许合。macOS 运行期探针还不算——它只在手动 `workflow_dispatch` 时跑，
+结果留证据但不作为流水线结论（`continue-on-error`），直到该槽位在真实 runner 上首跑通过。
 
 | Workflow | 内容 |
 |----------|------|