diff --git a/docker-compose.registry.yml b/docker-compose.registry.yml
index d3982852..780f7a91 100644
--- a/docker-compose.registry.yml
+++ b/docker-compose.registry.yml
@@ -201,6 +201,13 @@ services:
       ROBOCO_ENVIRONMENT: production
       ROBOCO_CLAIM_STALE_SECONDS: "1800"
       ROBOCO_STALE_CLAIM_REAP_SECONDS: "1800"
+      # External-PR review (read-only: discover inbound external/fork PRs, post
+      # one change-request; never runs contributor code — the supersede stays
+      # CEO-triggered + human-confirm gated). Matches the build compose.
+      ROBOCO_EXTERNAL_PR_ENABLED: ${ROBOCO_EXTERNAL_PR_ENABLED:-true}
+      ROBOCO_EXTERNAL_PR_REQUIRE_HUMAN_CONFIRM: ${ROBOCO_EXTERNAL_PR_REQUIRE_HUMAN_CONFIRM:-true}
+      # ROBOCO_EXTERNAL_PR_POLL_INTERVAL_SECONDS: "300"
+      # ROBOCO_EXTERNAL_PR_AUTHOR_ALLOWLIST: '["corey"]'   # empty = every external PR
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - ${CLAUDE_AUTH_DIR:-${HOME}/.claude}:/root/.claude