diff --git a/docs/architecture.md b/docs/architecture.md
index aa5e1e64d..f51f3a61b 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -66,8 +66,11 @@ Actions made of many commands (macros, a debugger that runs one step per call) u
   Commands run by other commands are not recorded, and the buffer is independent of the journal
   (Automate › Record Actions still records through the journal).
 - **Document trust.** `DocState::trust` is `Local` for workbooks made in the session and
-  `FromFile` for workbooks opened from a file, and for workbooks that received formulas or
-  validation pasted from one. Active content in a `FromFile` workbook asks before it runs. This
+  `FromFile` for workbooks opened from a file, and for workbooks that received a paste from one
+  that writes formulas or validation: Paste, Paste Special › All, All Except Borders, Formulas,
+  Formulas and Number Formats or Validation, and any linked paste other than column widths or
+  notes. Values, formats, column widths and notes carry nothing active. Active content in a
+  `FromFile` workbook asks before it runs. This
   is provenance, which no decision changes; `DocState::scripts_trusted` is the separate
   per-session consent for stored `automate.*` scripts (`automate.trustScripts`).
 - **Workbook data in hidden names** (`cmd/stash.rs`). An item is split over hidden