diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml
index f64536f..e9073d5 100644
--- a/.github/workflows/acceptance.yml
+++ b/.github/workflows/acceptance.yml
@@ -1,6 +1,9 @@
 name: Acceptance
 
 on:
+  push:
+    branches:
+      - main
   workflow_dispatch:
 
 permissions:
diff --git a/README.md b/README.md
index 28b0e74..fd43635 100644
--- a/README.md
+++ b/README.md
@@ -134,7 +134,9 @@ Do not run `terraform init` just to exercise this unreleased provider through `d
 
 ## Acceptance Tests
 
-Acceptance tests are opt-in because they can create real Kernel resources.
+Acceptance tests run automatically after changes reach `main` and can also be
+started manually through the `Acceptance` workflow. Local runs remain opt-in
+because they create real Kernel resources.
 
 Required for all acceptance tests:
 
diff --git a/docs/acceptance.md b/docs/acceptance.md
index 2c4c45d..e2f7b8a 100644
--- a/docs/acceptance.md
+++ b/docs/acceptance.md
@@ -1,8 +1,8 @@
 # Selected-Surface Acceptance Matrix
 
 This document is the live-API release gate for the provider's selected public
-surface. Unit tests remain the fast default. Acceptance tests run only through
-explicit local opt-in or the manual GitHub Actions workflow.
+surface. Unit tests remain the fast default. Acceptance tests run after changes
+reach `main`, through explicit local opt-in, or by manual workflow dispatch.
 
 The selected surface contains two managed resources and four read-only data
 sources. It does not claim coverage for future or unregistered Kernel objects.
@@ -59,8 +59,8 @@ go test -count=1 -timeout=30m -v ./internal/datasources/proxy -run TestAcc
 go test -count=1 -timeout=30m -v ./internal/datasources/extension -run TestAcc
 ```
 
-The manual `Acceptance` workflow runs the same six packages as separate matrix
-jobs with `fail-fast: false`. Live acceptance remains a manual pre-tag gate.
+The `Acceptance` workflow runs the same six packages as separate matrix jobs
+with `fail-fast: false` after changes reach `main` and on manual dispatch.
 
 ## Outside The Selected Surface
 
diff --git a/docs/release.md b/docs/release.md
index 80c08e5..c89f8c5 100644
--- a/docs/release.md
+++ b/docs/release.md
@@ -19,7 +19,7 @@ Use this checklist before publishing a Kernel Terraform provider version.
   checks each archive, and verifies checksum coverage. A snapshot skips signing
   and is not a publishable release.
 - Run the complete [selected-surface acceptance matrix](acceptance.md) with real credentials against the release commit.
-  - The manual `Acceptance` workflow runs all six packages as independent matrix jobs. Keep live tests out of normal pull-request CI.
+  - The `Acceptance` workflow runs all six packages as independent matrix jobs after changes reach `main` and supports manual dispatch. Keep live tests out of pull-request CI.
   - Process-level timeouts can bypass Go test cleanup. After an interrupted or hard-timeout run:
     1. In the Kernel dashboard or durable API, find projects, browser pools, profiles, proxies, and extensions named `kernel-tf-*` that were created during the failed workflow run.
     2. Delete leaked browser pools with `force=false`. If deletion conflicts with a lease, wait for the lease to end; do not force-release or recover the browser from Terraform cleanup.