diff --git a/hive-c0re/src/dashboard.rs b/hive-c0re/src/dashboard.rs
index d3ffdd0b..7192d64a 100644
--- a/hive-c0re/src/dashboard.rs
+++ b/hive-c0re/src/dashboard.rs
@@ -269,17 +269,17 @@ struct StateSnapshot {
     /// Peer hives in the same swarm. Parsed from `HYPERHIVE_PEERS`
     /// (JSON array of `{label,domain}` objects, emitted by the c0re
     /// NixOS module from `services.hyperhive.peers`). Empty on
-    /// single-hive deploys. Feeds iris's P33RS tab (#589). Each entry
+    /// single-hive deploys. Feeds the P33RS dashboard tab. Each entry
     /// exposes `name` (the operator-chosen label) and `url` (dashboard
-    /// link derived as `http://<domain>/`; v0 HTTP-only - HTTPS peers
-    /// require gateway TLS (#593/#594)).
+    /// link derived as `http://<domain>/`; HTTP-only until the gateway
+    /// has TLS and the scheme is threaded through).
     peer_hives: Vec<PeerHiveView>,
 }
 
 /// One peer hive for the P33RS dashboard tab. Derived from
 /// `HYPERHIVE_PEERS` env; `url` is the peer's dashboard root so the
 /// tab can render a clickable card without knowing the remote port.
-/// v0: always `http://` - HTTPS peers need gateway TLS (#593/#594).
+/// HTTP-only until per-peer TLS is wired through the gateway layer.
 #[derive(Serialize)]
 struct PeerHiveView {
     name: String,
diff --git a/nix/modules/hive-c0re.nix b/nix/modules/hive-c0re.nix
index dde7a1b6..8de18a11 100644
--- a/nix/modules/hive-c0re.nix
+++ b/nix/modules/hive-c0re.nix
@@ -53,7 +53,7 @@ in
       message if it's missing. Exposed to agents as
       `HYPERHIVE_HIVE_DOMAIN`; consumed by
       `hive-ag3nt::identity::hive_domain()` for `<name>@<domain>`
-      qualified labels (#589).
+      qualified labels.
     '';
   };
 
@@ -86,7 +86,7 @@ in
     description = ''
       Human-readable name of the wider swarm this hive belongs to.
       Hives at different DNS domains can share a swarm name when
-      they federate together (#589). Exposed to agents as
+      they federate together. Exposed to agents as
       `HYPERHIVE_SWARM_NAME`; surfaced in the dashboard chrome and
       per-agent system prompt when set.
     '';
@@ -97,7 +97,7 @@ in
   # `HYPERHIVE_PEERS` into the hive-c0re service and forwarded to agent
   # containers via `meta.rs::FORWARDED_VARS`. Consumed by
   # `identity.rs::peers()` + the dashboard's `peer_hives` state field
-  # (feeds iris's P33RS tab). See #589.
+  # (feeds the P33RS dashboard tab).
   options.services.hyperhive.peers = lib.mkOption {
     type = lib.types.attrsOf (lib.types.submodule {
       options = {
@@ -118,7 +118,7 @@ in
             Optional path to a PEM cert/bundle to trust for this peer's
             TLS. Null = system CA bundle (for Let's Encrypt peers). Set
             to the peer's self-signed cert for `selfSignedTls = true`
-            peers. See #594.
+            peers. Forward-compat slot; not yet used in v0.
           '';
         };
       };
@@ -132,8 +132,8 @@ in
       Peer hives in the same swarm. The attrset key is a short label
       used in dashboard links and log messages -- it does not need to
       match the remote hive's `hiveName`. Null `tlsCertFile` uses the
-      system CA bundle; set it for self-signed TLS peers (#594 slot,
-      unimplemented in v0).
+      system CA bundle; set it for self-signed TLS peers (forward-compat
+      slot, not yet used in v0).
     '';
   };