diff --git a/docs/names.md b/docs/names.md
index e0dcf522..080663a4 100644
--- a/docs/names.md
+++ b/docs/names.md
@@ -49,6 +49,12 @@ propagation to wait for and no external call on the provisioning path.
 per-name bookkeeping every other backend keeps, refuses a host outside its
 zone, and publishes nothing, because there is nothing left to publish.
 
+This page draws the wildcard zone. `Route53Dns` takes the other shape and
+writes a record set per hostname — two per named account — which is the
+number `plan/capacity.md` budgets a hosted zone against, and the propagation
+provisioning then waits on. [Deployment](deployment.md) is where a zone picks
+between the two.
+
 ## Everything the server answers
 
 <div><svg viewBox="0 0 1000 570" role="img" aria-label="A zone pds.example holds three records: an apex A record, a wildcard A record, and an acme-challenge TXT record. Two agent hostnames are synthesized by the wildcard rather than written into the zone. Both land on one listener holding one certificate covering the apex and the wildcard, which dispatches on the Host header: the opaque hostname serves a DID document, the handle hostname serves a plain-text DID, and both point at the same account.">