diff --git a/capsite-notes.md b/capsite-notes.md
index 61ed757..e70c3c1 100644
--- a/capsite-notes.md
+++ b/capsite-notes.md
@@ -78,8 +78,8 @@ flowchart LR
 ⚠ misalignments:
 - publish and dump are admin actions held by the cache key, but live on
   HTTP form routes rather than the RPC facet the webkey page uses
-- the public page can write: a miss fills from diigo through the owner's
-  session (to become read-only: the reader facet only)
+- ~~the public page can write~~ — resolved: it reads only through the
+  read-only `viewer()` facet; unfetched pages say so
 - the webkey page has no dump or publish; the home page has no fill
 
 ## Native-plugin wiring (the part that took a while)