fixup! fixup! docs: closely held vs widely held

main/guides/js-programming/hardened-js.md

@@ -79,19 +79,21 @@ e.g., only giving the `entryGuard` the ability to increment the counter.
 
 This limits the damage that can happen if there is an exploitable bug.
 
-### [Widely Shared vs. Closely Held](/guides/zoe/contract-access-control.html#access-control-with-objects)
+### [Widely Shared vs. Closely Held]
 
 #### Widely Shared Capabilities
 
 In the object capability model, "widely shared" refers to capabilities that are accessible to a large portion of the code within a system. For example:
 
 - [**agoricNames**](/guides/integration/name-services.html#agoricnames-agoricnamesadmin-well-known-names): This component serves as a read-only name service, which means it can be accessed by most parts of the system. Since it only allows data to be read and not modified, it poses minimal risk and can be safely made widely available.
+  Similarly, in [Access Control with Objects](guides/zoe/contract-access-control.html#access-control-with-objects), this concept is mirrored by the **publicFacet**, which exposes safe-to-share functionality publicly.
 
 #### Closely Held Capabilities
 
 On the other hand, "closely held" capabilities are restricted and only accessible to specific parts of the system that require them to function effectively:
 
-- [**agoricNamesAdmin**](/guides/integration/name-services.html#agoricnames-agoricnamesadmin-well-known-names): Known as the write facet of the name service, this component allows modifications to the data in `agoricNames`. Given its capability to alter critical system data, access to `agoricNamesAdmin` is limited to only those parts of the system that have a legitimate need for write access. This precaution helps to prevent potential misuse or errors that could compromise the system.
+- [**agoricNamesAdmin**](/guides/integration/name-services.html#agoricnames-agoricnamesadmin-well-known-names): Known as the write facet of the name service, this component allows modifications to the data in `agoricNames`. Given its capability to alter critical system data, access to `agoricNamesAdmin` is limited to only those parts of the system that have a legitimate need for write access.
+  This precaution helps to prevent potential misuse or errors that could compromise the system. This parallels the **creatorFacet** in [Access Control with Objects](guides/zoe/contract-access-control.html#access-control-with-objects), that is provided only to the caller who creates the contract instance.
 
 ::: tip Watch: Navigating the Attack Surface
 to achieve a _multiplicative_ reduction in risk. _15 min_<br />
@@ -336,7 +338,7 @@ const makeCounter = init => {
     incr: () => {
       value += 1;
       return value;
-    }
+    },
   };
 };
 ```
@@ -402,7 +404,7 @@ const makeMint = () => {
   const ledger = makeWeakMap();
 
   const issuer = harden({
-    makeEmptyPurse: () => mint.makePurse(0)
+    makeEmptyPurse: () => mint.makePurse(0),
   });
 
   const mint = harden({
@@ -420,11 +422,11 @@ const makeMint = () => {
           const newPurse = issuer.makeEmptyPurse();
           newPurse.deposit(amount, purse);
           return newPurse;
-        }
+        },
       });
       ledger.set(purse, initialBalance);
       return purse;
-    }
+    },
   });
 
   return mint;