Infra: Document dgit-repos-policy-trusting a bit

diff --git a/infra/dgit-repos-policy-trusting b/infra/dgit-repos-policy-trusting
index b550d012118e59f3c7633efb528c7a00bfafb79b..0620b704be8aa8c932e9ae4e2aa13e0f9ebabd32 100755 (executable)
--- a/infra/dgit-repos-policy-trusting
+++ b/infra/dgit-repos-policy-trusting
@@ -1,4 +1,13 @@
 #!/bin/bash
+#
+# This is a genuine policy, not just one for testing.
+#
+# It allows anyone authorised to push to also, on demand:
+#   - wipe the repo and replace it with a new one
+#     (with --deliberately-fresh-repo)
+#   - do non-fast-forward pushes
+#     (with --deliberately-not-fast-forward)
+
 set -e
 
 case "$DGIT_DRS_DEBUG" in