diff --git a/platform-infra/ansible/README.md b/platform-infra/ansible/README.md
index 19812dc..7b0b16e 100644
--- a/platform-infra/ansible/README.md
+++ b/platform-infra/ansible/README.md
@@ -10,7 +10,11 @@ nftables firewall + container egress filter → SSH hardening → backup/DR
 1. An Ubuntu 24.04 VM you can SSH into as a **sudo-capable user**.
 2. A **dedicated second virtual disk** attached to the VM for the ZFS pool
    (e.g. `/dev/sdb` or `/dev/vdb`) — separate from the OS disk.
-3. Ansible installed on your workstation (`pipx install ansible` or apt).
+3. Ansible on your workstation, installed **one way only** — prefer
+   `pipx install --include-deps ansible` (isolated). Mixing apt's `ansible`
+   with a pip `ansible` causes version-skew errors such as
+   `No module named 'ansible.module_utils.six.moves'`; if you hit that, remove
+   the duplicates and reinstall via pipx.
 
 ## Configure