diff --git a/Makefile b/Makefile
new file mode 100644
index 0000000..d56c6b1
--- /dev/null
+++ b/Makefile
@@ -0,0 +1,4 @@
+.PHONY: make
+
+make:
+	cargo build --release
diff --git a/docs/require.md b/docs/require.md
index 50ddfe8..9c014e4 100644
--- a/docs/require.md
+++ b/docs/require.md
@@ -17,8 +17,7 @@ A name is one or more dot-separated segments; each segment may contain
 `A–Z a–z 0–9 _ -`. Dots map to directory separators, so `require "db.migrations"`
 looks for `db/migrations.lua`. Paths (`/`, `..`), absolute names, and empty
 segments are rejected — a module can only ever be loaded from inside the
-search roots, which keeps `require` compatible with the sandbox: it is the
-only file access scripts have.
+search roots.
 
 ## Search roots
 
diff --git a/src/stdlib/require.rs b/src/stdlib/require.rs
index 1815469..514f865 100644
--- a/src/stdlib/require.rs
+++ b/src/stdlib/require.rs
@@ -5,8 +5,7 @@
 //! directory (the CWD in the REPL) followed by the entries of
 //! `$A_INCLUDE_PATHS` — through the standard `?.lua` / `?/init.lua` templates.
 //! Because a name may only contain identifier-like segments, a module can
-//! never name a file outside the roots; `require` is the sandbox's only file
-//! access.
+//! never name a file outside the roots.
 //!
 //! Each file is executed once and its return value cached by canonical path,
 //! so repeated requires — even under different names or through symlinks —