diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..0b16f31
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,26 @@
+# Default line endings + auto text detection
+* text=auto eol=lf
+
+# --- Downstream-protected paths -------------------------------------------
+# These paths keep the downstream (consumer) version on merge. A consumer who
+# runs `git fetch template && git merge template/main` will not have their
+# content, uploaded assets, or branding overwritten by Scaffold updates.
+#
+# Note: `merge=ours` resolves *conflicts* in favour of the downstream side.
+# It does not prevent NEW upstream files in these paths from appearing in the
+# working tree (no conflict exists when the file is new). You can `git rm`
+# any demo content that lands this way.
+
+src/content/**          merge=ours
+src/assets/**           merge=ours
+public/**               merge=ours
+
+# --- Binary types (no merge attempts, no noisy diffs) ---------------------
+*.png   binary
+*.jpg   binary
+*.jpeg  binary
+*.webp  binary
+*.gif   binary
+*.ico   binary
+*.woff  binary
+*.woff2 binary
diff --git a/README.md b/README.md
index d75dc54..867e0d7 100644
--- a/README.md
+++ b/README.md
@@ -24,6 +24,51 @@ npm install
 npm run dev
 ```
 
+## Updating to a newer Scaffold version
+
+Scaffold is designed to be forked. Once you've replaced the demo content with your own, you can still pull future Scaffold improvements (components, layouts, utils, tooling) without losing the work you've done.
+
+Add Scaffold as a remote (one-time):
+
+```sh
+git remote add template https://github.com/draftlab-org/scaffold.git
+```
+
+Pull updates whenever you want them:
+
+```sh
+git fetch template
+git merge template/main
+```
+
+### What's protected on merge
+
+Scaffold ships a `.gitattributes` file that marks these paths as **downstream-wins** using Git's built-in `merge=ours` driver — your version is always kept on merge, no per-clone setup required:
+
+- `src/content/**` — all content collections (pages, articles, people, etc.)
+- `src/assets/**` — uploaded images, logos, artwork
+- `public/**` — favicons, OG images, robots.txt, and anything else you've added there
+
+Everything else merges normally. If there's a real conflict in code, Git will flag it and you resolve it as usual.
+
+### Heads-up about new upstream files
+
+`merge=ours` resolves *conflicts*, but it doesn't stop **new** upstream files in protected paths from appearing in your working tree (no conflict exists when the file is new on the upstream side). After merging, run `git diff HEAD~1 --stat` and `git rm` any demo content you don't want.
+
+### If you forked before `.gitattributes` existed
+
+Git reads `.gitattributes` from the working tree *at the start* of a merge. If you forked Scaffold before this file was added, run this one-time bootstrap so the rules apply to your first merge:
+
+```sh
+git fetch template
+git checkout template/main -- .gitattributes
+git add .gitattributes
+git commit -m "Adopt Scaffold merge driver"
+git merge template/main
+```
+
+After that, the two-command flow above is all you need.
+
 ## Stack
 
 The template combines Astro v6 for static site generation with Tailwind CSS v4 for styling and React v19 for interactive components. Content is managed through Astro's type-safe content collections (Content Layer API) with Pages CMS providing a visual editing interface. The build includes automatic image optimization and is preconfigured for Netlify deployment. Requires Node.js v22.12+.
diff --git a/src/content/pages/how-to-use.yaml b/src/content/pages/how-to-use.yaml
index 0d77b9f..696d219 100644
--- a/src/content/pages/how-to-use.yaml
+++ b/src/content/pages/how-to-use.yaml
@@ -385,3 +385,94 @@ sections:
 
       These are generated at build time and can be used by external tools or
       client-side JavaScript.
+
+
+      ## Staying up to date with Scaffold
+
+
+      Scaffold is designed to be forked. Once you've replaced the demo content
+      with your own, you can still pull future Scaffold improvements
+      (components, layouts, utils, tooling) without losing the work you've
+      done.
+
+
+      ### Pulling updates
+
+
+      Add Scaffold as a remote (one-time):
+
+
+      ```bash
+
+      git remote add template https://github.com/draftlab-org/scaffold.git
+
+      ```
+
+
+      Then, whenever you want updates:
+
+
+      ```bash
+
+      git fetch template
+
+      git merge template/main
+
+      ```
+
+
+      ### What's protected on merge
+
+
+      Scaffold ships a `.gitattributes` file that marks these paths as
+      **downstream-wins** using Git's built-in `merge=ours` driver — your
+      version is always kept on merge, no per-clone setup required:
+
+
+      *   `src/content/**` — all content collections (pages, articles, people,
+      etc.)
+
+      *   `src/assets/**` — uploaded images, logos, artwork
+
+      *   `public/**` — favicons, OG images, robots.txt, and anything else
+      you've added there
+
+
+      Everything else (components, layouts, utils, styles, config) merges
+      normally. If there's a real conflict in code, Git will flag it and you
+      resolve it as usual.
+
+
+      ### Heads-up about new upstream files
+
+
+      `merge=ours` resolves *conflicts*, but it doesn't stop **new** upstream
+      files in protected paths from appearing in your working tree (no conflict
+      exists when the file is new on the upstream side). After merging, run
+      `git diff HEAD~1 --stat` and `git rm` any demo content you don't want.
+
+
+      ### If you forked before `.gitattributes` existed
+
+
+      Git reads `.gitattributes` from your working tree *at the start* of a
+      merge. If you forked Scaffold before this file was added, run this
+      one-time bootstrap so the rules apply to your first merge:
+
+
+      ```bash
+
+      git fetch template
+
+      git checkout template/main -- .gitattributes
+
+      git add .gitattributes
+
+      git commit -m "Adopt Scaffold merge driver"
+
+      git merge template/main
+
+      ```
+
+
+      After that first merge, the two-command flow above is all you need.