diff --git a/docs/front-matter.md b/docs/front-matter.md
index 2f4c1368..1c5d5dd9 100644
--- a/docs/front-matter.md
+++ b/docs/front-matter.md
@@ -268,6 +268,9 @@ permissions:                   # optional ADO access token configuration (see do
                                  # Default: executor uses $(System.AccessToken).
                                  # Set this only for cross-org writes or
                                  # named-identity attribution.
+# permissions-required:         # optional: abstract read/write capability requirements imported
+#   read: true                  # components can declare without naming a consumer's service
+#   write: true                 # connections; see docs/imports.md#permissions-required
 supply-chain:                  # optional internal supply-chain mirror (see docs/supply-chain.md)
   feed:                          # mirror binaries (compiler, AWF, ado-script) from an ADO Artifacts feed
     name: my-project/my-feed     # feed name or project/feed; scalar `feed: my-feed` shorthand also works