diff --git a/libs/shared/docs/behaviour-spec.mdx b/libs/shared/docs/behaviour-spec.mdx
index 37de06e..6fb2678 100644
--- a/libs/shared/docs/behaviour-spec.mdx
+++ b/libs/shared/docs/behaviour-spec.mdx
@@ -21,7 +21,7 @@ tested where._
 Every bullet below is a real test name from the suite — an `it()` title (frontend) or a test
 method name (backend), read as a sentence. Nothing here is hand-written prose: this page
 **is** the suite, reshaped for a business reader. 440 frontend behaviours across
-9 contexts; 231 backend behaviours across 39 test
+9 contexts; 236 backend behaviours across 41 test
 classes.
 
 ## Frontend (by context)
@@ -1136,12 +1136,18 @@ classes.
 - A closed mapping is absent from its geldigTot onwards
 - ByProgram is evaluated per call not captured at type load
 
+### RouteInventoryTests
+
+- Every mapped route is authz gated or on the named allow list
+- Every gate marker names a known admin wrapper
+
 ### StamdataEndpointTests
 
 - Stamdata reads are admin only
 - Table list exposes the reflected schema
 - Table returns all rows without a peildatum
 - Peildatum before the seed windows hides every row
+- Unparseable peildatum is 400 not 500
 - Unknown table is 404
 
 ### StamdataValidationTests
@@ -1172,6 +1178,11 @@ classes.
 - Worked hours are accepted
 - Phone change is validated
 
+### SwaggerGateTests
+
+- Swagger document is served in development
+- Swagger document is not served outside development
+
 ### UploadAccessTests
 
 - The owner can read the bytes