diff --git a/docs/specs/2026-09-26-m5b-hardening.md b/docs/specs/2026-09-26-m5b-hardening.md
index ee44c4f..0aeed4d 100644
--- a/docs/specs/2026-09-26-m5b-hardening.md
+++ b/docs/specs/2026-09-26-m5b-hardening.md
@@ -118,7 +118,8 @@ A text holding any of these is refused, with the rule's name:
   (`sk-learn` is not a key): GitHub (`ghp_`, `gho_`, `ghu_`, `ghs_`, `ghr_`, `github_pat_`),
   GitLab (`glpat-`), `sk-` followed by at least 20 key characters, Slack (`xox` then one of `b`,
   `a`, `p`, `r`, `s`, then `-`), AWS access keys (`AKIA` or `ASIA` then 16 upper-case letters or
-  digits), and private-key blocks (a line starting `-----BEGIN` and ending `PRIVATE KEY-----`).
+  digits), and private-key blocks (a line starting `-----BEGIN` and ending `PRIVATE KEY-----`,
+  or, for PGP's armor, `PRIVATE KEY BLOCK-----`; public-key blocks pass).
 - The chat-template tags (6.2's list), in memory writes only: memory refuses them outright, which
   is stricter than neutralising (M5a rule, kept).