diff --git a/specification/2026-01-26/apps.mdx b/specification/2026-01-26/apps.mdx
index 43fef209d..3a811206d 100644
--- a/specification/2026-01-26/apps.mdx
+++ b/specification/2026-01-26/apps.mdx
@@ -1748,7 +1748,9 @@ const allowList: string[] = [];
 if (permissions?.camera) allowList.push('camera');
 if (permissions?.microphone) allowList.push('microphone');
 if (permissions?.geolocation) allowList.push('geolocation');
-const allowAttribute = allowList.join(' ');
+if (permissions?.clipboardWrite) allowList.push('clipboard-write');
+// Permissions Policy directives are separated by ';' (a space would start an allowlist)
+const allowAttribute = allowList.join('; ');
 ```
 
 **Security Requirements:**
diff --git a/specification/draft/apps.mdx b/specification/draft/apps.mdx
index f2523f25e..f043f7141 100644
--- a/specification/draft/apps.mdx
+++ b/specification/draft/apps.mdx
@@ -2557,7 +2557,9 @@ const allowList: string[] = [];
 if (permissions?.camera) allowList.push('camera');
 if (permissions?.microphone) allowList.push('microphone');
 if (permissions?.geolocation) allowList.push('geolocation');
-const allowAttribute = allowList.join(' ');
+if (permissions?.clipboardWrite) allowList.push('clipboard-write');
+// Permissions Policy directives are separated by ';' (a space would start an allowlist)
+const allowAttribute = allowList.join('; ');
 ```
 
 **Security Requirements:**