diff --git a/hive-ag3nt/src/vacuum.rs b/hive-ag3nt/src/vacuum.rs
index 652e1f99..d721bf0f 100644
--- a/hive-ag3nt/src/vacuum.rs
+++ b/hive-ag3nt/src/vacuum.rs
@@ -11,7 +11,7 @@
 //! Trade-off (accepted — issue tracker "perms borked"): a misbehaving harness
 //! could skip its own cleanup, which the host-side version was meant to
 //! prevent. But a compromised harness is already inside the container trust
-//! boundary (docs/security.md), and these are ephemeral local artifacts — so
+//! boundary (`docs/security.md`), and these are ephemeral local artifacts — so
 //! the honest fix is to clean them up where they live.
 
 use std::path::Path;
diff --git a/hive-c0re/src/build_logs.rs b/hive-c0re/src/build_logs.rs
index 6a38dc0b..76679abc 100644
--- a/hive-c0re/src/build_logs.rs
+++ b/hive-c0re/src/build_logs.rs
@@ -394,7 +394,7 @@ impl BuildLogs {
     }
 }
 
-/// Spawn the hourly retention sweep. A host-side sweep (build_logs.sqlite
+/// Spawn the hourly retention sweep. A host-side sweep (`build_logs.sqlite`
 /// is hive-c0re-owned, so no privsep ownership issue). Runs once at startup
 /// before its first sleep so a long-uptime instance doesn't accumulate a
 /// backlog the first hour after restart.