diff --git a/swarm-authelia-bridge-sock/README.md b/swarm-authelia-bridge-sock/README.md
index d15c417b..69aa3035 100644
--- a/swarm-authelia-bridge-sock/README.md
+++ b/swarm-authelia-bridge-sock/README.md
@@ -18,6 +18,6 @@ client logic here, only the request/response shapes both sides import.
 
 One operation today: idempotently ensure an agent exists as an authelia
 subject. Deliberately **not** a wholesale-replace-the-file API — the bridge
-owns both `users.json` (canonical) and rendering `users.yml` internally; a
+reads `users.yml`, changes what the request named, and writes it back; a
 caller only ever asks for one user to exist, never sends rendered YAML or a
 file blob. See `swarm-authelia-bridge/README.md` for the helper itself.
diff --git a/swarm-authelia-bridge-sock/src/lib.rs b/swarm-authelia-bridge-sock/src/lib.rs
index c0fb0b60..963c5765 100644
--- a/swarm-authelia-bridge-sock/src/lib.rs
+++ b/swarm-authelia-bridge-sock/src/lib.rs
@@ -20,11 +20,10 @@
 //! the file it writes. Fully ordinary permissions, no capabilities, no root.
 //!
 //! **Per-operation, not wholesale-replace.** [`BridgeRequest::EnsureAgentIdentity`]
-//! asks for one user to exist; the bridge owns both `users.json` (canonical)
-//! and rendering `users.yml` internally. A caller never sends rendered YAML
-//! or a file blob — that would invite a last-writer-wins race between
-//! independent callers and duplicate the rendering logic on both sides of
-//! the wire.
+//! asks for one user to exist; the bridge reads `users.yml`, changes what the
+//! request named, and writes it back. A caller never sends rendered YAML or a
+//! file blob — that would invite a last-writer-wins race between independent
+//! callers and duplicate the rendering logic on both sides of the wire.
 
 use serde::{Deserialize, Serialize};