diff --git a/docs/tooling/tenant-overlay.md b/docs/tooling/tenant-overlay.md
index 78dfade..49ec23b 100644
--- a/docs/tooling/tenant-overlay.md
+++ b/docs/tooling/tenant-overlay.md
@@ -29,7 +29,8 @@ When
 - tracked `workspace.toml`
 - tracked `artifact-inputs.toml` for runtime and publish-time source inputs
 - tracked `website-bootstrap.toml` when the tenant needs Launchplane/devkit to
-  rebuild public website identity, canonical URL, homepage route, or logo state
+  rebuild public website identity, local canonical URL, homepage route, or logo
+  state
 - tenant-owned code
 
 ## Tenant Root Should Not Contain
diff --git a/docs/tooling/workspace-cli.md b/docs/tooling/workspace-cli.md
index 3ad5d4e..aa5a774 100644
--- a/docs/tooling/workspace-cli.md
+++ b/docs/tooling/workspace-cli.md
@@ -182,10 +182,12 @@ Notes
   supported addon settings such as `authentik_sso` values.
 - When a tenant repo contains `website-bootstrap.toml` beside `workspace.toml`,
   runtime selection also folds that non-secret website intent into the same
-  typed payload. The bootstrap contract can add install modules, select the
-  lane canonical URL, identify a homepage page or controller route, and point at
-  a repo-local logo asset. Data workflows and startup apply that state
-  idempotently after modules are installed, without hard-coded tenant defaults.
+  typed payload. The bootstrap contract can add install modules, provide the
+  local canonical URL, identify a homepage page or controller route, and point
+  at a repo-local logo asset. Shared/testing/prod canonical URLs are
+  Launchplane-owned runtime records. Data workflows and startup apply bootstrap
+  state idempotently after modules are installed, without hard-coded tenant
+  defaults.
 - Legacy setting-shaped inputs such as `ENV_OVERRIDE_CONFIG_PARAM__*`,
   `ENV_OVERRIDE_AUTHENTIK__*`, and `ENV_OVERRIDE_SHOPIFY__*` are still accepted
   as a compatibility input and converted into the same typed payload, but they