AIRE relies on Z-DNA and NFE2–MAF to select gene targets for thymic T cell tolerization by enhancing double-stranded break generation and promoter poising.