diff --git a/docs/superpowers/specs/2026-04-15-installer-download-mode-design.md b/docs/superpowers/specs/2026-04-15-installer-download-mode-design.md
index 5b82c9a..7277287 100644
--- a/docs/superpowers/specs/2026-04-15-installer-download-mode-design.md
+++ b/docs/superpowers/specs/2026-04-15-installer-download-mode-design.md
@@ -46,7 +46,11 @@ Two pieces, each small:
 
 **1) A Gitea Actions workflow** that, on every `v*` tag push, builds the App,
 Worker, and Installer; packages them; and creates a Gitea Release on the
-public repo at `git.kuns.dev/{owner}/ClaudeDo`.
+public repo at `git.kuns.dev/releases/ClaudeDo`.
+
+The `releases/` org on the Gitea instance is world-readable without auth;
+private work (including the source repo, if you want) lives under `kuns/*`
+which is never public. The installer only needs to hit `releases/ClaudeDo`.
 
 **2) An installer rewrite** that replaces the three publish/deploy steps with
 a single `DownloadAndExtractStep`, detects existing installs via a marker
@@ -76,7 +80,7 @@ Decisions:
 The "latest installer exe" URL is stable:
 
 ```
-https://git.kuns.dev/{owner}/ClaudeDo/releases/latest/download/ClaudeDo.Installer-<version>.exe
+https://git.kuns.dev/releases/ClaudeDo/releases/latest/download/ClaudeDo.Installer-<version>.exe
 ```
 
 (Gitea also exposes `/releases/download/<tag>/<filename>` for specific
@@ -146,7 +150,7 @@ Version`), set by the workflow's `/p:Version=$VERSION`.
 Replaces `PublishAppStep`, `PublishWorkerStep`, `DeployBinariesStep`.
 
 ```
-1. GET https://git.kuns.dev/api/v1/repos/{owner}/ClaudeDo/releases/latest
+1. GET https://git.kuns.dev/api/v1/repos/releases/ClaudeDo/releases/latest
    Parse tag_name and asset URLs for:
      - ClaudeDo-<ver>-win-x64.zip
      - checksums.txt