diff --git a/docs/awf-config-spec.md b/docs/awf-config-spec.md
index 08b05764..1c01caa7 100644
--- a/docs/awf-config-spec.md
+++ b/docs/awf-config-spec.md
@@ -180,6 +180,7 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`).
 - `container.dockerHost` → `--docker-host`
 - `container.dockerHostPathPrefix` → `--docker-host-path-prefix`
 - `container.runnerToolCachePath` → *(config-only; checked first for optional read-only runner tool cache mount, before `RUNNER_TOOL_CACHE` and `/home/runner/work/_tool` auto-detection)*
+- `container.mounts[]` → `-v, --mount` *(repeatable; each array entry maps to one Docker volume mount in `host_path:container_path[:ro|rw]` format; in chroot mode, container paths are automatically prefixed with `/host`)*
 - `chroot.binariesSourcePath` → *(config-only; overlays a runner-side binaries directory at `/usr/local/bin` inside chroot mode)*
 - `chroot.identity.home` → *(config-only; forwarded as `AWF_CHROOT_IDENTITY_HOME` and applied after chroot pivot)*
 - `chroot.identity.user` → *(config-only; forwarded as `AWF_CHROOT_IDENTITY_USER` and applied to `USER`/`LOGNAME` after chroot pivot)*