diff --git a/03-DESIGN/01-to-be/38-building-the-operators-machine.md b/03-DESIGN/01-to-be/38-building-the-operators-machine.md
index 90be731..005243e 100644
--- a/03-DESIGN/01-to-be/38-building-the-operators-machine.md
+++ b/03-DESIGN/01-to-be/38-building-the-operators-machine.md
@@ -334,7 +334,7 @@ tool of each.
 *Replaced on 2026-10-04 by [to-be 41](41-the-shell-and-the-accounts-environment.md).* A review before
 assigning found that the shell module would duplicate every machine's existing startup file, drop
 lines from it, leave the prompt uninstalled, and could not be unassigned
-([issue 225](../../04-ISSUES/225-a-login-the-mesh-set-is-never-given-back/00-report.md)). The shell,
+([issue 228](../../04-ISSUES/228-a-login-the-mesh-set-is-never-given-back/00-report.md)). The shell,
 its environment, the modules that plug into it, and the host's fix are built and proven there. What
 follows is the original plan, kept for the record.
 
diff --git a/03-DESIGN/01-to-be/41-the-shell-and-the-accounts-environment.md b/03-DESIGN/01-to-be/41-the-shell-and-the-accounts-environment.md
index d64c2ac..49c2eb0 100644
--- a/03-DESIGN/01-to-be/41-the-shell-and-the-accounts-environment.md
+++ b/03-DESIGN/01-to-be/41-the-shell-and-the-accounts-environment.md
@@ -78,7 +78,7 @@ harmless and visible.
 ## Work packages
 
 ```
-WP1  the host gives a login back                 (mesh-host)            issue 225
+WP1  the host gives a login back                 (mesh-host)            issue 228
 WP2  the controller composes environment and shell code (mesh-controller)
 WP3  the modules                                 (mesh-catalog)         needs WP2 to resolve
 WP4  the service manager's module, finished      (mesh-catalog)         independent
@@ -91,7 +91,7 @@ against WP2's controller before anything is published.
 
 ## WP1 — The host gives a login back
 
-*mesh-host. Half a day. [Issue 225](../../04-ISSUES/225-a-login-the-mesh-set-is-never-given-back/00-report.md).*
+*mesh-host. Half a day. [Issue 228](../../04-ISSUES/228-a-login-the-mesh-set-is-never-given-back/00-report.md).*
 
 **What changes.**
 
@@ -108,7 +108,7 @@ against WP2's controller before anything is published.
   already there keeps its owner and mode (ADR 0182). Until this, a fresh account's `~/.config` or
   `~/.local/share` would have been created as root's.
 - Giving the shell back is reported, never fatal. A failed `usermod` on removal is named in the
-  outcome and the record is dropped, because a fatal removal is exactly the wedge issue 225 is about.
+  outcome and the record is dropped, because a fatal removal is exactly the wedge issue 228 is about.
 
 **Proof.** The host's tests:
 
diff --git a/04-ISSUES/225-a-login-the-mesh-set-is-never-given-back/00-report.md b/04-ISSUES/228-a-login-the-mesh-set-is-never-given-back/00-report.md
similarity index 97%
rename from 04-ISSUES/225-a-login-the-mesh-set-is-never-given-back/00-report.md
rename to 04-ISSUES/228-a-login-the-mesh-set-is-never-given-back/00-report.md
index 33ab02f..9be8a57 100644
--- a/04-ISSUES/225-a-login-the-mesh-set-is-never-given-back/00-report.md
+++ b/04-ISSUES/228-a-login-the-mesh-set-is-never-given-back/00-report.md
@@ -7,7 +7,7 @@ fixed-by:
 amended-design:
 ---
 
-# 225 — A login the mesh set is never given back, and undeclaring one stops the node applying
+# 228 — A login the mesh set is never given back, and undeclaring one stops the node applying
 
 ## What was observed