diff --git a/README.md b/README.md
index c866c26..bdfe6e6 100644
--- a/README.md
+++ b/README.md
@@ -7,7 +7,7 @@ TOML for [Bend 2](https://github.com/bendlang/bend).
 With [Bend](https://github.com/bendlang/bend) alone there is nothing to
 install: import eztoml by its hub name and version, and `bend` fetches it
 from [the hub](https://hub.bend-lang.com) into `~/.bend/lib` on the first
-run; no install step. eztoml is built and checked on Bend 2.0.34.
+run; no install step. eztoml is built and checked on Bend 2.0.35.
 
 ```
 import emerging-eztoml@0.8.0.0/main.bend as Toml
diff --git a/SPEC.md b/SPEC.md
index 511c653..e6d83bf 100644
--- a/SPEC.md
+++ b/SPEC.md
@@ -94,5 +94,5 @@ These assumptions sit outside the proofs. They are the complete list of Trusted
 | ID | Assumption | Why it is trusted |
 | :---- | :---- | :---- |
 | TOML-TRUST-1 | The Bend checker is sound: a proof it accepts proves its law. | It cannot be checked from inside Bend; this is EZ-TRUST-1. eztoml's code and the proof gate build with the flake's `bend` input. |
-| TOML-TRUST-2 | The proof-gate runner fails the build unless the first line of `bend PROOF.bend` is `ALL PROOFS CHECK` | It is the flake's `checks.proofs`, run by `nix flake check` in CI: it runs every PROOF.bend on the flake's `bend` (2.0.34), whose verdict line is `ALL PROOFS CHECK` or `SOME PROOFS FAIL`. It stands in for ez's `mkProofs` (EZ-TRUST-4) until ez runs on 2.0.34. |
+| TOML-TRUST-2 | The proof-gate runner fails the build unless the first line of `bend PROOF.bend` is `ALL PROOFS CHECK` | It is the flake's `checks.proofs` (`ez.mkProofs`), run by `nix flake check` in CI: it runs every PROOF.bend on the flake's `bend` (2.0.35), whose verdict line is `ALL PROOFS CHECK` or `SOME PROOFS FAIL`. This is EZ-TRUST-4. |
 | TOML-TRUST-3 | A TOML file's bytes reach `parse` as the code points of their UTF-8 decoding, and invalid UTF-8 is the reader's to reject. | `parse` takes a `String`. Bend's `File.read` decodes before eztoml sees the text, and replaces an invalid byte with U+FFFD rather than rejecting it (checked with a driver that dumps the code points it read), so a U+FFFD in a comment or string reads as valid text. A caller that must refuse invalid bytes checks the file as UTF-8 before `parse` (README); a byte-level entry point that refuses them is a Future Step (docs/rfc/eztoml-grammar-proofs.md, REVIEW-G8). |
diff --git a/flake.lock b/flake.lock
index cc682bf..a6c804d 100644
--- a/flake.lock
+++ b/flake.lock
@@ -7,17 +7,17 @@
         ]
       },
       "locked": {
-        "lastModified": 1790643370,
-        "narHash": "sha256-VYGPIHkNeccEaBHGer1B7+GNiWKQBiN/iiS7PozBXx0=",
+        "lastModified": 1791027223,
+        "narHash": "sha256-VsMHe5HUg9EC+l8PlfOu2IHTVmP5Vu04GPDYwSkm6q8=",
         "owner": "bendlang",
         "repo": "bend",
-        "rev": "777ee0b55c485afdd7e68bd917b3d23a88d77371",
+        "rev": "5a0b523f7759335164f1dead0e0815234a5fd9dc",
         "type": "github"
       },
       "original": {
         "owner": "bendlang",
         "repo": "bend",
-        "rev": "777ee0b55c485afdd7e68bd917b3d23a88d77371",
+        "rev": "5a0b523f7759335164f1dead0e0815234a5fd9dc",
         "type": "github"
       }
     },
diff --git a/flake.nix b/flake.nix
index 539aebe..3e4d7de 100644
--- a/flake.nix
+++ b/flake.nix
@@ -2,13 +2,13 @@
   description = "eztoml: TOML for Bend 2";
 
   inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
-  # bendlang/bend's flake at the commit that packages 2.0.34 (the v2.0.34 tag
-  # still packages 2.0.33)
+  # bendlang/bend's flake at the commit that packages 2.0.35 (the v2.0.35 tag
+  # still packages 2.0.34)
   inputs.bend = {
-    url = "github:bendlang/bend/777ee0b55c485afdd7e68bd917b3d23a88d77371";
+    url = "github:bendlang/bend/5a0b523f7759335164f1dead0e0815234a5fd9dc";
     inputs.nixpkgs.follows = "nixpkgs";
   };
-  # ez 1.3.0 runs on 2.0.34, so ez (and the bolt it builds) follows this bend
+  # ez (and the bolt it builds) follows this bend
   inputs.ez = {
     url = "github:Emerging-Patterns/ez";
     inputs.nixpkgs.follows = "nixpkgs";