diff --git a/README.md b/README.md
index 8ebf6a08c..2dc8e6ae1 100644
--- a/README.md
+++ b/README.md
@@ -58,6 +58,7 @@ use `awf --reflect`. It prints the `/reflect` JSON response to stdout.
 - **Domain and URL controls**: allow/deny domain rules, SSL Bump (`--ssl-bump`), and URL patterns (`--allow-urls`, requires `--ssl-bump`)
 - **Data protection controls**: DLP scanning (`--enable-dlp`), DNS-over-HTTPS, and agent runtime limits (`--agent-timeout`)
 - **API proxy capabilities**: OpenAI, Anthropic, Copilot, Gemini, and Google Vertex AI targets with rate limits, token steering, Anthropic auto-cache, and `apiProxy.hostedWeb.{claude,codex}` domain policies
+- **Unified enclaves**: isolated script and agent execution with cost control via `--max-num-tool-calls`, repository seeding, and dynamic admission
 - **Infrastructure flexibility**: upstream proxy chaining, host service access, Docker-in-Docker, custom mounts, memory limits, and TTY mode
 - **Protected output capture**: opt-in, host-only command stdout/stderr capture with attempt and completeness metadata
 - **Operational tooling**: pre-download images and inspect logs/stats/summaries/audits from live or saved runs
diff --git a/docs/enclaves-architecture.md b/docs/enclaves-architecture.md
index c08a0d17f..5546becf7 100644
--- a/docs/enclaves-architecture.md
+++ b/docs/enclaves-architecture.md
@@ -493,10 +493,10 @@ gateway, and readiness errors never log response bodies, headers, or
 capabilities.
 
 The exact routed tool contract includes the broker's advisory for the configured
-`--max-num-tool-calls` limit, when present. Readiness derives that sentence from
-the same formatter as the broker; it does not strip descriptions or accept a
-different limit. Tool names, enabled executor set, schemas, gateway origin
-prefix, and all other description text must still match exactly.
+`--max-num-tool-calls` limit, when present. Readiness derives that capped-limit
+sentence from the same formatter as the broker; it does not strip descriptions
+or accept a different limit. Tool names, enabled executor set, schemas, gateway
+origin prefix, and all other description text must still match exactly.
 
 Host startup diagnostics track whether this actual readiness handshake was
 never attempted, attempted, or completed; they do not infer it from broker