diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 7a6b7d1..04609f8 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -31,7 +31,9 @@ jobs:
           path-to-signatures: 'signatures/cla.json'
           path-to-document: 'https://github.com/stanford-developers/steer-core/blob/main/CLA.md'
           branch: 'cla-signatures'
-          allowlist: 'nsiemons,dependabot[bot],github-actions[bot]'
+          # GitHub logins, not git author names: the maintainer commits as nicholas9182.
+          # Bots never sign; their changes are reviewed by the maintainer.
+          allowlist: 'nicholas9182,dependabot[bot],github-actions[bot]'
           custom-notsigned-prcomment: >
             Thank you for your contribution! Before we can merge this PR, you need
             to sign our [Contributor License Agreement](https://github.com/stanford-developers/steer-core/blob/main/CLA.md).