diff --git a/docs/running-an-arc-node.md b/docs/running-an-arc-node.md
index 93f04f9..c85019a 100644
--- a/docs/running-an-arc-node.md
+++ b/docs/running-an-arc-node.md
@@ -448,9 +448,11 @@ prohibited: `txpool`, `debug`, `trace`, `admin`, `flashbots`, `mev`, `ots`.
 --public-api
 ```
 
-The `--public-api` flag enforces these restrictions at runtime: it hides
-pending-transaction RPCs and warns at startup if `--http.api` or `--ws.api`
-exposes namespaces outside the safe set.
+The `--public-api` flag enforces pending-transaction hiding, but it does not
+rewrite or reject `--http.api` / `--ws.api` selections. It warns at startup if
+either selection exposes namespaces outside the safe set, and the node continues
+to serve those namespaces. Operators must still configure public endpoints with
+only the safe namespaces above.
 
 To verify, call `rpc_modules`: