diff --git a/nix/module-eval.nix b/nix/module-eval.nix
index 6ca1a0cb..b0b26984 100644
--- a/nix/module-eval.nix
+++ b/nix/module-eval.nix
@@ -961,9 +961,9 @@ let
       # Reads the host's tmpfiles rules, not the options: the socket directory
       # nginx and the container share is created there, so a rename that
       # resolved but stopped reaching the module would leave the gateway
-      # proxying to a path nothing creates. All four old paths are defined in
-      # the fixture, so removing any single shim fails the eval rather than
-      # only the one this assertion reads.
+      # proxying to a path nothing creates. All three old paths are defined
+      # in the fixture, so removing any single shim fails the eval rather
+      # than only the one this assertion reads.
       # THREE movers (authBridgeUrl, forgeTokenFile, queue.clientSecretFile)
       # are asserted as rendered effects rather than as option values, so a
       # rename that resolved but stopped reaching the module is caught