diff --git a/docs/specification/common/identity-linking/index.md b/docs/specification/common/identity-linking/index.md
index 13c428fec..0f2bce918 100644
--- a/docs/specification/common/identity-linking/index.md
+++ b/docs/specification/common/identity-linking/index.md
@@ -1018,10 +1018,10 @@ field conveys the business's value prompt to the platform (e.g.,
 * **JWT grant lifetime.** JWT authorization grants **MUST** be short-lived;
   the `exp` claim **SHOULD** be no more than 60 seconds after `iat`. Short
   lifetimes limit the window for grant theft and replay.
-* **JWT grant single-use.** Businesses **MUST** enforce single-use JWT;
-  a short exp narrows the replay window, but only jti tracking closes it.
+* **JWT grant single-use.** Businesses **MUST** enforce single-use JWT
   authorization grants by tracking the `jti` claim within the grant's
-  validity window.
+  validity window; a short `exp` narrows the replay window, but only
+  `jti` tracking closes it.
 * **Grant relay.** Businesses **MUST NOT** store or forward JWT
   authorization grants received from platforms. Grants are bearer
   credentials scoped to a single audience (`aud`) and a single use.