diff --git a/definitions/default/waas-component.tf b/definitions/default/waas-component.tf
index 29b36d3..1608986 100644
--- a/definitions/default/waas-component.tf
+++ b/definitions/default/waas-component.tf
@@ -85,11 +85,11 @@ locals {
       {
         name              = "updates.xml"
         extension         = "xml"
-        description       = "Joomla extension update server manifest — lists releases for Joomla auto-update; must be kept in sync with manifest.xml version"
+        description       = "Joomla extension update server manifest — lists releases for Joomla auto-update; managed by release workflow, never overwritten by sync"
         required          = true
         always_overwrite  = false
+        protected         = true
         audience          = "developer"
-        template          = "templates/joomla/updates.xml.template"
         stub_content      = <<-MOKO_END
         <!--
           Joomla Extension Update Server XML