diff --git a/docs/project/backlog/WP-53-inbound-identity-and-citizen-scoping.md b/docs/project/backlog/WP-53-inbound-identity-and-citizen-scoping.md
index 488df9e..5372a61 100644
--- a/docs/project/backlog/WP-53-inbound-identity-and-citizen-scoping.md
+++ b/docs/project/backlog/WP-53-inbound-identity-and-citizen-scoping.md
@@ -115,8 +115,8 @@ session sync (CLAUDE.md out-of-scope list).
 ## Risks
 
 - Missing a `DemoOwner` call site → a citizen sees another's data. Mitigated: grep gate (clean)
-  + `ApplicationTests.Applications_are_scoped_to_the_caller_bsn` (two `X-Subject` identities,
-  HTTP end-to-end) proving neither sees the other's cases.
+  - `ApplicationTests.Applications_are_scoped_to_the_caller_bsn` (two `X-Subject` identities,
+    HTTP end-to-end) proving neither sees the other's cases.
 - ZGW rol filter param name is exact and version-sensitive; asserted in
   `OpenZaakZaakSourceTests.ListMyCases_filters_by_the_callers_bsn`.
 
diff --git a/docs/reference/openzaak-integration.md b/docs/reference/openzaak-integration.md
index 4424055..9b676c1 100644
--- a/docs/reference/openzaak-integration.md
+++ b/docs/reference/openzaak-integration.md
@@ -173,7 +173,7 @@ CallerIdentity.cs`):
   existing admin-only `ListCases(now)`. `LocalZaakSource` filters `ApplicationStore.List(bsn)`
   (unchanged local behaviour); `OpenZaakZaakSource` appends ZGW's
   `rol__betrokkeneIdentificatie__natuurlijkPersoon__inpBsn=<bsn>` query filter to `GET
-  {ZrcBaseUrl}/zaken`. `GET /applications` (the citizen's own dashboard) now routes through this
+{ZrcBaseUrl}/zaken`. `GET /applications` (the citizen's own dashboard) now routes through this
   instead of calling `ApplicationStore` directly — the last "reads a static store directly" gap
   the ACL caveat below used to flag for a citizen-facing endpoint.