diff --git a/CLAUDE.md b/CLAUDE.md
index ad2bbd1..9ecfa4f 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -68,6 +68,17 @@ All repos hosted at `gitea.dooplex.hu/admin/`.
 
 SSH key-based authentication configured. No password prompts.
 
+**IMPORTANT — SSH binary:** Claude Code runs in Git Bash, which has its own SSH at
+`/usr/bin/ssh` (= `C:\Program Files\Git\usr\bin\ssh.exe`). This binary does NOT have
+access to the Windows SSH agent and will fail silently. Always use the Windows native
+OpenSSH binary:
+
+```
+SSH=/c/Windows/System32/OpenSSH/ssh.exe
+```
+
+All SSH commands below use `$SSH` — set it at the start of your session.
+
 | Host | IP | User | Role |
 |------|----|------|------|
 | Build server (k3s node) | 192.168.0.180 | kisfenyo | Build + push images, kubectl |
@@ -94,12 +105,12 @@ The build server (192.168.0.180) has the build toolchain. The build script lives
 
 First, check the current running version:
 ```bash
-ssh kisfenyo@192.168.0.180 "sudo kubectl get deploy -n felhom-system hub -o jsonpath='{.spec.template.spec.containers[0].image}'"
+$SSH kisfenyo@192.168.0.180 "sudo kubectl get deploy -n felhom-system hub -o jsonpath='{.spec.template.spec.containers[0].image}'"
 ```
 
 Then build with the next version (e.g., if current is 0.1.2, use 0.1.3):
 ```bash
-ssh kisfenyo@192.168.0.180 "cd ~/build/felhom-hub && ./build.sh <NEW_VERSION> --push"
+$SSH kisfenyo@192.168.0.180 "cd ~/build/felhom-hub && ./build.sh <NEW_VERSION> --push"
 ```
 
 The build script:
@@ -111,13 +122,13 @@ The build script:
 ### Step 3: Deploy to k3s
 
 ```bash
-ssh kisfenyo@192.168.0.180 "sudo kubectl set image -n felhom-system deploy/hub hub=gitea.dooplex.hu/admin/felhom-hub:<NEW_VERSION>"
+$SSH kisfenyo@192.168.0.180 "sudo kubectl set image -n felhom-system deploy/hub hub=gitea.dooplex.hu/admin/felhom-hub:<NEW_VERSION>"
 ```
 
 ### Step 4: Verify the deployment
 
 ```bash
-ssh kisfenyo@192.168.0.180 "sudo kubectl get pods -n felhom-system -l app=hub && echo '---' && sudo kubectl logs -n felhom-system -l app=hub --tail 10"
+$SSH kisfenyo@192.168.0.180 "sudo kubectl get pods -n felhom-system -l app=hub && echo '---' && sudo kubectl logs -n felhom-system -l app=hub --tail 10"
 ```
 
 Should show pod Running and `[INFO] felhom-hub <VERSION> starting` in logs.
@@ -127,9 +138,9 @@ Should show pod Running and `[INFO] felhom-hub <VERSION> starting` in logs.
 | Step | Command | Where |
 |------|---------|-------|
 | 1. Commit + push | `git add -A && git commit && git push` | Local (this repo) |
-| 2. Build + push image | `ssh 192.168.0.180 "cd ~/build/felhom-hub && ./build.sh <VER> --push"` | Build server |
-| 3. Deploy | `ssh 192.168.0.180 "sudo kubectl set image -n felhom-system deploy/hub hub=...:<VER>"` | Build server (kubectl) |
-| 4. Verify | `ssh 192.168.0.180 "sudo kubectl get pods -n felhom-system -l app=hub"` | Build server |
+| 2. Build + push image | `$SSH kisfenyo@192.168.0.180 "cd ~/build/felhom-hub && ./build.sh <VER> --push"` | Build server |
+| 3. Deploy | `$SSH kisfenyo@192.168.0.180 "sudo kubectl set image -n felhom-system deploy/hub hub=...:<VER>"` | Build server (kubectl) |
+| 4. Verify | `$SSH kisfenyo@192.168.0.180 "sudo kubectl get pods -n felhom-system -l app=hub"` | Build server |
 
 ## Build & deploy workflow — Website