diff --git a/hive-c0re/src/lifecycle/host_config.rs b/hive-c0re/src/lifecycle/host_config.rs
index b8c2364c..f8a10349 100644
--- a/hive-c0re/src/lifecycle/host_config.rs
+++ b/hive-c0re/src/lifecycle/host_config.rs
@@ -145,9 +145,6 @@ fn config_bind_source(name: &str) -> PathBuf {
 /// directories so nspawn doesn't refuse to start; missing dirs are
 /// non-fatal.
 ///
-/// The only caller left is the `ManageRootAgent` grant; the parent/child
-/// tree that handed every agent its own children here is gone.
-///
 /// **Four dirs, three different answers** — the uniformity of the
 /// original loop is what hid that:
 ///
@@ -164,9 +161,8 @@ fn config_bind_source(name: &str) -> PathBuf {
 ///   which the holder has a stated reason to read, let alone write.
 ///   hive-c0re still reads it directly on the host (`stats::hive_stats`),
 ///   which needs no bind mount into anyone else's container.
-/// - `work` is **absent entirely**, like `harness`. It is the agent's own
-///   worktrees and build trees, often very large, and nothing gives the
-///   holder a reason to see it.
+/// - `work` is **absent entirely**, like `harness`: the agent's own, often
+///   very large, worktrees and build trees.
 ///
 /// ⚠️ The config-repo seeding hive-c0re does at spawn is **not** affected by
 /// the `config` flag and must not be read as a reason to widen it: that runs