diff --git a/docs/tools/scheduling.md b/docs/tools/scheduling.md
index c10374f5..5b7b6517 100644
--- a/docs/tools/scheduling.md
+++ b/docs/tools/scheduling.md
@@ -10,11 +10,10 @@ targets only yourself — use `remind` for an unapproved self-wake. The
 other four verbs need no approval: holding the `scheduling` tool group
 is the whole gate.
 
-Authorization for cancel / edit / fire: you can act on schedules you own
-or any owned by an agent in your topology subtree. **`list_schedules` is
-not scoped at all** — it returns every schedule on the hive, bodies
-included, which is what makes it useful for auditing and worth knowing
-before you put anything private in a schedule body.
+Authorization is one rule for all four verbs: you reach schedules you own
+and any owned by an agent in your topology subtree. `list_schedules`
+applies it too, so the snapshot only ever shows schedules you could also
+cancel.
 
 ### `request_schedule_prompt(targets, body, first_fire_at_unix, interval_seconds?, description?)`
 
@@ -62,10 +61,6 @@ and `last_result`, `next_fire_at_unix`, `interval_seconds`. Use to
 look up an id before cancelling, or to audit upcoming wake-ups in
 your subtree.
 
-Unscoped on purpose — unlike the verbs that _change_ a schedule, this
-one applies no ownership filter, so the snapshot covers other agents'
-schedules and the operator's.
-
 ## `diagnostics` tool group
 
 ### `get_logs(agent, lines?)`