diff --git a/inout/CHANGELOG.md b/inout/CHANGELOG.md
index 5d0f81e8..4cd04475 100644
--- a/inout/CHANGELOG.md
+++ b/inout/CHANGELOG.md
@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.2.3 (UNRELEASED)
+### Fixed
+- List of safety pre-conditions in `InOutBufReserved::from_raw` docs ([#1502])
+
+[#1502]: https://github.com/RustCrypto/utils/pull/1502
+
 ## 0.2.2 (2025-12-27)
 ### Changed
 - Require `block-padding` v0.4.2 ([#1291])
diff --git a/inout/src/reserved.rs b/inout/src/reserved.rs
index ad3d06d3..6982c4f9 100644
--- a/inout/src/reserved.rs
+++ b/inout/src/reserved.rs
@@ -52,6 +52,7 @@ impl<T> InOutBufReserved<'_, '_, T> {
     ///   must be valid for both reads and writes for `out_len * mem::size_of::<T>()`
     ///   many bytes.
     /// - `in_ptr` and `out_ptr` must be either equal or non-overlapping.
+    /// - `in_len` must be less than or equal to `out_len` (i.e. `in_len <= out_len`).
     /// - If `in_ptr` and `out_ptr` are equal, then the memory referenced by
     ///   them must not be accessed through any other pointer (not derived from
     ///   the return value) for the duration of lifetime 'a. Both read and write