diff --git a/README.md b/README.md
index 240f1a6..d1babbc 100644
--- a/README.md
+++ b/README.md
@@ -94,6 +94,25 @@ Tier 4: Residential proxy ──── success ──→ cache + return (15–45
 | `docker-compose.prod.yml`    | Production: `restart: always`, memory limit, healthcheck |
 | `docker-compose.full.yml`    | Full stack: scraper + web + docs                         |
 
+## Docker images (two GHCR images)
+
+| Image                                          | Dockerfile                       | Runtime                          | Use case |
+|------------------------------------------------|----------------------------------|----------------------------------|----------|
+| `ghcr.io/germondai/trawl`         (`:latest`)  | `apps/api/Dockerfile`            | Bun 1.3.14 (modern, AVX2)        | Default — modern Linux amd64/arm64 |
+| `ghcr.io/germondai/trawl-baseline` (`:baseline`) | `apps/api/Dockerfile.baseline`   | Bun 1.3.14 baseline (no AVX2)     | Older CPUs / older kernels (Synology NAS, J4125, Atom-era) |
+
+Two images live at separate GHCR packages so `:latest` of one cannot clobber `:latest` of another. Pick the one your hardware supports:
+
+```yaml
+# Modern hardware (most users)
+image: ghcr.io/germondai/trawl:latest
+
+# Older CPUs without AVX2 / Synology / older kernels
+image: ghcr.io/germondai/trawl-baseline:latest
+```
+
+Synology note: many Synology NAS units (DSM 7.x on J4125 / older hardware) ship kernel 4.4.x, which Bun's modern runtime can't fully handle. The baseline variant is published for that case — confirm-working status on the reporter's actual hardware (DS920+, kernel 4.4.302) is pending verification. Published by independent GitHub Actions workflows (`.github/workflows/publish.yml`, `publish-baseline.yml`); tag-triggered releases (`v*`, `baseline-v*`) and manual `workflow_dispatch` both work.
+
 ## Configuration
 
 | Variable                     | Default                  | Description                                                              |