diff --git a/03-DESIGN/01-to-be/28-building-the-bus.md b/03-DESIGN/01-to-be/28-building-the-bus.md
index 4495fce..82b58c8 100644
--- a/03-DESIGN/01-to-be/28-building-the-bus.md
+++ b/03-DESIGN/01-to-be/28-building-the-bus.md
@@ -225,10 +225,12 @@ pays for itself furthest away.
       headers, the contributions file, a served tool call and a grant, capturing what the three
       implementations do *today*. Written first because a suite born on the new bus certifies
       whatever the new bus happens to do
-- [ ] 3.2 design 19 rewritten from exchanges, queues and routing keys to the subjects and streams of
+- [x] 3.2 design 19 rewritten from exchanges, queues and routing keys to the subjects and streams of
       design 25 §2–§3, per capability, with ADR 0074's model untouched: floor plus capabilities, an
       implementation legitimate when it claims less, identity from the sealed credential, dedup on
-      `x-event-id`
+      `x-event-id`. Claims checked against a running server are marked *verified* in the text, so
+      a reader can tell what was measured from what was reasoned. One limitation lifts with the
+      transport: a module may now call another's tool, which issue 049 recorded it could not.
 - [ ] 3.3 the fixtures restated on NATS, and the capability each implementation claims
 - [ ] 3.4 the controller's link on NATS
 - [ ] 3.5 the host's link on NATS — mirroring, still importing nothing