diff --git a/runbooks/deprecated/README.md b/runbooks/deprecated/README.md
new file mode 100644
index 0000000..b884f0e
--- /dev/null
+++ b/runbooks/deprecated/README.md
@@ -0,0 +1,28 @@
+# Deprecated v1 Runbooks
+
+The runbooks in this directory have been superseded by the
+`runbooks/v1-do-doc-NN-*.md` execution documents (or, in the case of
+`07-dns-zones.md`, deferred to v2 entirely per D-019).
+
+They are preserved here so the audit trail from the early v1 drafting
+phase remains accessible. **Do not execute them.** The v1 deploy is
+gated through the do-document set.
+
+## Replacement map
+
+| Deprecated runbook | Replacement |
+|---|---|
+| `00-pre-deploy.md` | superseded by D-017 + D-018 (no per-cycle backups; direct MAAS teardown); `v1-do-doc-01-prep.md` covers prep |
+| `01a-octavia-pki-generation.md` | `v1-do-doc-02-pki.md` |
+| `02-deploy.md` | `v1-do-doc-04-deploy.md` |
+| `03-vault-init.md` | `v1-do-doc-05-vault-init.md` |
+| `04-magnum-domain.md` | `v1-do-doc-06-magnum-domain.md` |
+| `04a-capi-bootstrap-cluster.md` | `v1-do-doc-07-capi-bootstrap.md` |
+| `05-magnum-capi-driver.md` | `v1-do-doc-08-magnum-driver.md` |
+| `06-tenant-setup.md` | `v1-do-doc-09-tenant.md` |
+| `07-dns-zones.md` | **deferred to v2 per D-019** (no v1 replacement) |
+| `08-validate.md` | `v1-do-doc-10-validate.md` |
+
+`01-destroy-model.md` is **not** in this directory - it remains active in
+`runbooks/` and is referenced as a conditional sub-procedure by
+`v1-do-doc-03-destroy.md`.
\ No newline at end of file