diff --git a/README.md b/README.md
index 1e80fd8..1fe324e 100644
--- a/README.md
+++ b/README.md
@@ -30,7 +30,7 @@ Connect once to `my.phast.app/mcp` → create/manage `user.phast.app` → search
 ## Boundaries
 
 - **Phast app composes.** It owns the portable MCP/tool belt and Prefab composition.
-- **Oracle discovers.** Provider/MCP/OAuth discovery comes from the capability graph, not a hard-coded Phast app directory.
+- **Oracle discovers.** Provider/MCP/OAuth discovery comes from the capability graph, not a hard-coded Phast app directory. Live since 2026-10-28: `providers_search` reads `https://oracle.teahub.xyz/search.json` (`ORACLE_URL`, cached `ORACLE_TTL_SECONDS`, default an hour, last good copy on the volume) and `tools_install` puts a capability on the belt by its Oracle id, carrying its evidence state. Teahub's own services are in Oracle through its overlay (`teahubxyz/oracle` `oracle/overlay.json`).
 - **Persimmons holds secrets.** Phast app stores connection/authority references, not secret values.
 - **Factory builds/operates.** Provisioning uses bounded deterministic infrastructure routes.
 - **Clients are replaceable.** ChatGPT, Claude, Codex, or another MCP client should be able to use the same Phast app without recollecting the user's tools.