diff --git a/03-DESIGN/01-to-be/24-the-secrets-vault.md b/03-DESIGN/01-to-be/24-the-secrets-vault.md
index aac31be8..6bcd81a3 100644
--- a/03-DESIGN/01-to-be/24-the-secrets-vault.md
+++ b/03-DESIGN/01-to-be/24-the-secrets-vault.md
@@ -132,7 +132,7 @@ mesh has root secrets, so a mesh has a vault; it is not something a mesh opts in
 ordinary way. It does not yet mint the mesh's bus accounts: until the third milestone of ADR 0547 the
 controller mints them, hands the vault each covered account's value (ADR 0374 §1) and keeps the others as
 today, and from then the vault mints every one
-(*Every secret lives in the vault*, below).
+(*Every secret lives in the vault*, above).
 
 There is **one vault per mesh**, on the control-node, reached from any node the way identity is.
 Node scoping (ADR 0084,