diff --git a/provenance.go b/provenance.go
index 958abea..ed67ac8 100644
--- a/provenance.go
+++ b/provenance.go
@@ -48,6 +48,9 @@ var ProvenanceDomains = map[string]struct{}{
 	"attesto.provenance.v1.evidence_tree":   {},
 	"attesto.provenance.v1.policy_tree":     {},
 	"attesto.provenance.v1.attestation":     {},
+	"attesto.disclosure.v2": {},
+	"attesto.zk.range.v1.statement": {},
+	"attesto.zk.range.v1.transcript": {},
 }
 
 // TopLeafRoles is the canonical order of the six typed top-tree leaves. No
diff --git a/provenance_parity_test.go b/provenance_parity_test.go
index dac2fff..c8c096f 100644
--- a/provenance_parity_test.go
+++ b/provenance_parity_test.go
@@ -159,8 +159,15 @@ func TestProvenanceMalformedRandomizersAreRefused(t *testing.T) {
 func TestProvenanceDomainRegistryMatchesRust(t *testing.T) {
 	vector := loadProvenanceVector(t, "provenance-domain-registry")
 	domains := vector["domains"].([]any)
-	if len(domains) != len(ProvenanceDomains) || len(domains) != 18 {
-		t.Fatalf("registry size mismatch: rust=%d go=%d", len(domains), len(ProvenanceDomains))
+	// Eighteen provenance domains plus the three REVIEW-02 protocols that own
+	// their own preimage spaces: disclosure v2 and the ZK range statement and
+	// transcript.
+	const expected = 21
+	if len(domains) != len(ProvenanceDomains) || len(domains) != expected {
+		t.Fatalf(
+			"registry size mismatch: vector=%d go=%d expected=%d",
+			len(domains), len(ProvenanceDomains), expected,
+		)
 	}
 	for _, domain := range domains {
 		if _, ok := ProvenanceDomains[domain.(string)]; !ok {