diff --git a/README.md b/README.md
index 0f797f7..86b94f6 100644
--- a/README.md
+++ b/README.md
@@ -98,15 +98,7 @@ azd up
 
 Now `inbox-triage` fires automatically on every new email — no client, no waiting. Send yourself a message, then watch your Teams channel (VIP / incident) or your inbox (replies). Tail the live trace with `azd monitor --logs`.
 
-### Clean up
-
-```bash
-azd down --purge
-```
-
-> Hitting an error? See [docs/troubleshooting.md](docs/troubleshooting.md).
-
-## <img src="https://raw.githubusercontent.com/microsoft/fluentui-system-icons/main/assets/Shield/SVG/ic_fluent_shield_24_regular.svg" width="20" align="center"> Make it yours
+### 6. <img src="https://raw.githubusercontent.com/microsoft/fluentui-system-icons/main/assets/Shield/SVG/ic_fluent_shield_24_regular.svg" width="20" align="center"> Make it yours
 
 - ✍️ Edit `skills/vip-rules.md` to set your VIPs, what to skip, and what escalates to Teams.
 - 🔁 The `weekly-rule-suggestions` agent proposes tuning that you approve by hand.
@@ -114,6 +106,14 @@ azd down --purge
 
 → Full guide: [docs/customize.md](docs/customize.md).
 
+### 7. Clean up
+
+```bash
+azd down --purge
+```
+
+> Hitting an error? See [docs/troubleshooting.md](docs/troubleshooting.md).
+
 ## How it works (the short version)
 
 This is an Azure Functions app on the serverless agents runtime. Each agent is a markdown file (`*.agent.md`) that reasons over your rules in `skills/*.md`; a small `tools/match_rule.py` adds deterministic classification. Microsoft 365 actions go through Entra-authorized MCP connectors — no app secrets, managed identity end to end.