diff --git a/README.md b/README.md
index 4427e37..9e2cef4 100644
--- a/README.md
+++ b/README.md
@@ -96,6 +96,7 @@ less install.sh && bash install.sh
 
 ```sh
 brew tap Pushkinist/rmlx
+brew trust Pushkinist/rmlx   # one-time: Homebrew now requires explicitly trusting third-party taps
 brew install rmlx
 ```
 
diff --git a/docs/RELEASING.md b/docs/RELEASING.md
index c781925..86eabba 100644
--- a/docs/RELEASING.md
+++ b/docs/RELEASING.md
@@ -110,10 +110,14 @@ cosign verify-blob \
 **Homebrew (build from source):**
 ```sh
 brew tap Pushkinist/rmlx
+brew trust Pushkinist/rmlx   # one-time: Homebrew refuses to load formulae from untrusted third-party taps
 brew install rmlx
 brew test rmlx
 rmlx --version
 ```
+> Recent Homebrew versions block third-party taps until trusted — a fresh
+> `brew install rmlx` fails with `Refusing to load formula … from untrusted tap`
+> until `brew trust Pushkinist/rmlx` is run once.
 
 Local formula check before publishing:
 ```sh