diff --git a/docs/trust-boundary/security.md b/docs/trust-boundary/security.md
index 14007901..907726c8 100644
--- a/docs/trust-boundary/security.md
+++ b/docs/trust-boundary/security.md
@@ -236,7 +236,7 @@ this gap.
 
 ⚠️ **`ReloadGatewayNginx` acts on a host unit, so nothing implicitly
 scopes it.** Its containment is the unit name hard-coded in `hive-priv`:
-a caller can't name the unit, so the verb can't be steered at another
+a caller can't name the unit, so it can't steer the verb at another
 service. **A privileged verb needs something bounding what it can act
 on; when that isn't a namespace, it has to be a constant the caller
 can't supply.**
@@ -290,7 +290,7 @@ matching the agent-name convention (char-validated) or the known
 sibling service containers (`hive-forge`, `hive-matrix`, `hive-ci`),
 and rejects arbitrary container names. `hive-gateway` is a host unit,
 not a container, so it's not in this list — see `ReloadGatewayNginx`
-above for how its access is scoped instead.
+above for how the hard-coded unit name scopes its access instead.
 
 **Socket-activated** — systemd starts `hive-priv` on the first
 incoming connection (`LISTEN_FDS=1`); it's not running between calls.