diff --git a/docs/swarm/ui.md b/docs/swarm/ui.md index 33c567d6..dfa50d7a 100644 --- a/docs/swarm/ui.md +++ b/docs/swarm/ui.md @@ -685,9 +685,9 @@ swarm. The tick is off by default, so an entry is for this agent alone. The **egress** card on `/swarm` has two lists of the swarm-wide entries, one per line, with **remove** beside each and an **add** that opens the same dialog without the tick (the entry is always for every agent). **allowed** is the list above. **denied** is the swarm's -deny list: a denied name is refused in every egress mode, even when an allowed entry, a hive's +deny list: every egress mode refuses a denied name, even when an allowed entry, a hive's own `allowedDomains` or the unrestricted internet flag would let it through. The card says -which hives have not applied the current deny list yet; until they do, their proxies may still let +which hives haven't applied the current deny list yet; until they do, their proxies may still let those names through. The two lists use the same requests as the agent card, against `/api/egress/allowed-domains` and `/api/egress/denied-domains`. The deny list has no per-agent editor on the agent card yet, and no automatic entries.