diff --git a/hive-agent-mcp/src/send_allow.rs b/hive-agent-mcp/src/send_allow.rs
index cb46409f..741de09b 100644
--- a/hive-agent-mcp/src/send_allow.rs
+++ b/hive-agent-mcp/src/send_allow.rs
@@ -5,7 +5,7 @@
 //! a silent drop.
 
 /// Where the NixOS module writes the per-agent send allow-list (see
-/// `nix/templates/harness/`). Empty list = unrestricted (the
+/// `nix/agent-modules/mcp.nix`). Empty list = unrestricted (the
 /// default). Non-empty list constrains `mcp__hyperhive__send`'s `to`
 /// field; the manager is always implicitly permitted regardless of
 /// the list contents.
diff --git a/hive-agent/src/mcp_config.rs b/hive-agent/src/mcp_config.rs
index fb44f208..614518e8 100644
--- a/hive-agent/src/mcp_config.rs
+++ b/hive-agent/src/mcp_config.rs
@@ -13,7 +13,7 @@ pub const SERVER_NAME: &str = "hyperhive";
 /// Default loopback port the built-in hyperhive MCP surface is served on
 /// (streamable HTTP, via the persistent `hive-mcp-http` daemon). Overridable
 /// via `hyperhive.mcp.httpPort`; **must match that option's default** in
-/// `nix/templates/harness/`. Safe as a single fixed value across all
+/// `nix/agent-modules/mcp.nix`. Safe as a single fixed value across all
 /// agents because each container runs in its own private network namespace,
 /// so `127.0.0.1:<port>` is per-container-private (no cross-agent collision).
 pub const DEFAULT_MCP_HTTP_PORT: u16 = 8790;
@@ -242,7 +242,7 @@ pub fn builtin_tools_arg() -> String {
 }
 
 /// Where the NixOS module writes the per-agent extra-MCP spec (see
-/// `nix/templates/harness/`). Each entry becomes an additional
+/// `nix/agent-modules/mcp.nix`). Each entry becomes an additional
 /// `mcpServers.<key>` block in the rendered claude config + a
 /// `mcp__<key>__<tool>` pattern in `--allowedTools`.
 const EXTRA_MCP_PATH: &str = "/etc/hyperhive/extra-mcp.json";