diff --git a/CLAUDE.md b/CLAUDE.md
index 5ce16029..104348f7 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -219,10 +219,11 @@ hand-maintained per-file tree drifts out of sync with the code.
 - **`nix/`** — `host-modules/` (the host stack: hyperhive core options,
   `hive-{c0re,priv,forge,gateway,matrix,network,tls,ci}`, otel, swarm),
   `agent-modules/` (the per-agent harness feature modules),
-  `templates/{agent,ruth}.nix` (container entry points), `packages/`
-  (flake package outputs), `docs/` (the options-doc derivation), plus
-  `sources.nix` / `rust.nix` / `checks.nix` / `devshell.nix` /
-  `treefmt.nix` behind the thin `flake.nix`.
+  `container-modules/` (modules imported inside service containers —
+  guest side), `templates/{agent,ruth}.nix` (container entry points),
+  `packages/` (flake package outputs), `docs/` (the options-doc
+  derivation), plus `sources.nix` / `rust.nix` / `checks.nix` /
+  `devshell.nix` / `treefmt.nix` behind the thin `flake.nix`.
 - **`docs/`** — subsystem reference docs (see *Reading paths* below).
 - **`branding/`**, **`scripts/`** — static assets + helper scripts.
 
diff --git a/flake.nix b/flake.nix
index b8c4dd88..a0f82a2e 100644
--- a/flake.nix
+++ b/flake.nix
@@ -20,7 +20,8 @@
   #   nix/checks.nix    flake checks
   #   nix/devshell.nix  dev shell
   #   nix/treefmt.nix   formatter config
-  #   nix/host-modules/, nix/agent-modules/, nix/templates/  the NixOS module trees
+  #   nix/host-modules/, nix/agent-modules/, nix/container-modules/,
+  #   nix/templates/                                          the NixOS module trees
   outputs =
     inputs@{
       self,