diff --git a/docs/Architecture.md b/docs/Architecture.md
index 00cbd14..148a81e 100644
--- a/docs/Architecture.md
+++ b/docs/Architecture.md
@@ -555,9 +555,9 @@ can do rather than trying to prevent steering.
 - **Only credentials are secrets;** every other setting is reviewable
   configuration.
 
-**Identity:** each agent is its own LLDAP principal in a tightly scoped Authelia
-group, never the operator's account, with its own account and token in each
-service it uses (X5).
+**Identity:** each agent is its own Samba AD principal in a tightly scoped
+Authelia group, never the operator's account, with its own account and token in
+each service it uses (X5).
 
 **Logging:** structured JSON lines to the host journal and the log stack. Every
 durable state change emits exactly one line, with a fixed envelope (time, agent,
@@ -1131,7 +1131,7 @@ so every upstream action traces to one agent.
 ### X5. Supporting services
 
 All self-hosted: Matrix (Synapse), Gitea, LiteLLM, the local inference host,
-Vaultwarden, LLDAP with Authelia, and SilverBullet for the operator's view of
+Vaultwarden, Samba AD with Authelia, and SilverBullet for the operator's view of
 the vault. Each agent has its own account, token and room in each; nothing is
 shared between agents.
 
diff --git a/docs/Development-Plan.md b/docs/Development-Plan.md
index 147db0e..5719cfe 100644
--- a/docs/Development-Plan.md
+++ b/docs/Development-Plan.md
@@ -47,8 +47,8 @@ Only `nisse-dev` has real code; `nisse-core` and `nisse-ops` are placeholders.
 
 ## 2. The environment today
 
-- **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, LLDAP with
-  Authelia. The infrastructure repository exists in Gitea.
+- **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, Samba AD
+  with Authelia. The infrastructure repository exists in Gitea.
 - **Local inference:** llama-swap on an RTX 4090 host (320 W cap). The benchmark
   (PR #55) chose `qwen3.8-27b` for local work.
 - **Models by role today:** driver and helper `claude-opus-5-5`, expert
@@ -572,7 +572,7 @@ SilverBullet so far (M5.4).
 (D7, X2), collection when idle.
 
 **M6.3 Secrets and identity.** *Pre-approved.* Per-agent secret sets on the host,
-LLDAP principal (L12).
+Samba AD principal (L12).
 
 **M6.4 Delivery.** *Pre-approved.* Watchtower, restarts gated on an idle flag (X4).