diff --git a/docs/architecture/multiplayer.md b/docs/architecture/multiplayer.md
index 779a722..c1f7f64 100644
--- a/docs/architecture/multiplayer.md
+++ b/docs/architecture/multiplayer.md
@@ -245,6 +245,7 @@ special handling: `pump` stops, and the next push simply carries a `Menu` contai
 POST /api/lobby/create, /api/lobby/join      lobby
 POST /api/intent          { gameId, seq, intent }
 GET  /api/stream          EventSource — per-seat frames, with Last-Event-ID resume
+GET  /api/save            ?token= — the seat's own save; 403 SAVE_AFTER_FINISH in a running Competitive game
 GET  /api/health          { ok, service, engineVersion, games } — unauthenticated; see below
 GET  /api/games           every game and lobby, summarised          ┐
 GET  /api/games/<id>/save the save, for keeping or replaying        ├ ADMIN_SECRET
diff --git a/docs/quickstart.md b/docs/quickstart.md
index a1cb450..3397d53 100644
--- a/docs/quickstart.md
+++ b/docs/quickstart.md
@@ -190,7 +190,9 @@ Please do report anything that looks like a bug or an area to be improved.
 - **What you expected versus what happened**, with the Day and Stage. "Day 2 Stage 9, train 5 had
   no coaches" is worth more than "passengers seem broken".
 - **Save the game** (the **Save replay** button) and send the file. A save is the seed and the moves
-  made, so it replays exactly and the problem can be looked at directly.
+  made, so it replays exactly and the problem can be looked at directly. In a Competitive
+  multiplayer game the button waits until the game is over, because the file carries the seed and
+  the seed is every rival's hand; note the Day and Stage and save it at the end.
 - **Anything the screen did not explain.** If you had to guess a rule, that is worth saying even
   when the game was right.
 - **Anything you went looking for and could not find.**