diff --git a/content/docs/architecture.mdx b/content/docs/architecture.mdx
index 500ace1..c728be0 100644
--- a/content/docs/architecture.mdx
+++ b/content/docs/architecture.mdx
@@ -118,7 +118,7 @@ carries the exact contract for each.
 |---|---|---|
 | **Config-authored** | The shipped shape. Single app, evaluation, air-gapped, most production deployments | The runtime boots the metadata authored in the image, plus anything installed into it |
 | **Artifact-pinned** | The app is released on its own cadence, separately from the runtime image | One variable names a published artifact by URL, with an optional integrity pin. Upgrading the app is a change to that variable plus a restart |
-| **Composed** | Several organizations behind the isolation wall, sharing one database, running a published app | The same artifact reference, consumed from the deployment's own configuration so the enterprise plugins load alongside it. Air-gap licensed only |
+| **Composed** | Several organizations behind the isolation wall, sharing one database, running a published app — the hosted single-app SaaS shape | The same artifact reference, consumed from the deployment's own configuration so the enterprise plugins load alongside it. Air-gap licensed only, and [refused at startup](/docs/deploy/air-gapped) otherwise |
 
 Whether the deployment also talks to a **control plane** is a separate
 decision, made by the cloud-posture variable — a connected deployment can be
diff --git a/content/docs/deploy/index.mdx b/content/docs/deploy/index.mdx
index 95fd45d..136e63e 100644
--- a/content/docs/deploy/index.mdx
+++ b/content/docs/deploy/index.mdx
@@ -44,7 +44,7 @@ available to you — it is not just a matter of packaging.
 
 | Shape | The app comes from | Use it when |
 |---|---|---|
-| **Shipped runtime** | The image's own bundled application | A single-organization deployment; the default the Compose stack configures. |
+| **Config-authored** | The image's own bundled application — the metadata authored in the image, plus anything installed into it | A single-organization deployment; the default the Compose stack configures, and the shape that needs no configuration. |
 | **Artifact-pinned** | A published app artifact named by URL, resolved before any deployment config runs | You run one published app and want app upgrades to be an environment change and a restart, with no image rebuild. Note that the deployment's enterprise plugins do **not** load on this path. |
 | **Composed** | A published app artifact composed *with* this deployment's enterprise plugins | Several organizations share one database. This is the hosted single-app SaaS shape — and it is **air-gap-licensed only**, enforced at startup. |