diff --git a/README.md b/README.md
index fa94fe9..5d8d042 100644
--- a/README.md
+++ b/README.md
@@ -161,22 +161,25 @@ is claimed or a scan does not complete.
 ### Installing the agent
 
 `/fpagent/install.sh` is a public installer (also served for `curl | bash`). It
-fetches the newest bundle from the private
+fetches the newest bundle for the host architecture — x86_64 or 32-bit i386,
+preferring the bundle built for the machine's Ubuntu codename — from the private
 [`fingerprint-agent`](https://sources.yrka.app/YOUreka/fingerprint-agent/releases)
 forge, verifies its sha256, then runs the bundle's own installer, which handles
 libfprint, the udev rule, `plugdev` and the systemd service. On a field laptop:
 
 ```sh
-curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --enable-service
+curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash
 curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --check   # report only
-curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0 --enable-service
+curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0
 ```
 
 Rerunning it is the upgrade path: it installs the newest release (or `--tag`
-for a pinned one), the bundle installer reports the version change, and with
-`--enable-service` it restarts a running service so the new binary takes effect.
-The version is the git hash carried in the asset name, stamped next to the
-binary (`/usr/local/bin/fpagent.version`) and compared on the next run.
+for a pinned one), the bundle installer reports the version change, and it
+restarts a running service so the new binary takes effect. The version is the
+git hash carried in the asset name, stamped next to the binary
+(`/usr/local/bin/fpagent.version`) and compared on the next run. The systemd
+service and the self-update timer are on by default; pass `--no-service` or
+`--no-updates` to leave them off.
 
 The forge is private, so the operator's laptop needs no credentials: the app
 reads the release with `GITEA_RELEASE_INSTALL_KEY` and proxies it through