--- a/doc/how-it-works	Tue Oct 13 12:03:23 2009 +0100
+++ b/doc/how-it-works	Tue Oct 13 12:22:30 2009 +0100
@@ -18,6 +18,7 @@
 repository called "hgadmin". A hook in this repository re-runs
 "refresh-auth" on the most recent version after every push.
 
-Finally, hook in an extension is run for each changeset that is remotely
-committed, which uses the rules file to determine whether to allow the
-changeset.
+When users try to commit new changesets, a hook is run which consults the
+rules file to decide whether to allow the changeset into the repository.
+This can depend not only on the user and the repository, but also the
+branch and files in the changeset.