diff --git a/swarm-controller/src/store.rs b/swarm-controller/src/store.rs
index d7875876..6d94a400 100644
--- a/swarm-controller/src/store.rs
+++ b/swarm-controller/src/store.rs
@@ -8,8 +8,8 @@ use swarm_secret_client::{Error, SecretStore};
 
 /// The cert-auth role the controller logs in under.
 ///
-/// `nix/host-modules/swarm-bao.nix`'s `controllerPolicyName` creates the role,
-/// names the policy after it, and `nix/module-eval.nix` pins the literal.
+/// `nix/host-modules/swarm-bao.nix`'s `controllerPolicyName` creates the
+/// role and names the policy after it.
 ///
 /// ⚠️ Not the certificate's CN. The role *matches on* the CN
 /// (`allowed_common_names`), so the two are deliberately different strings.
diff --git a/swarm-secret-client/src/path.rs b/swarm-secret-client/src/path.rs
index a869fdd7..b3cd91c5 100644
--- a/swarm-secret-client/src/path.rs
+++ b/swarm-secret-client/src/path.rs
@@ -166,8 +166,7 @@ mod tests {
         // Renaming any of these is a silent 403 at provision time, not a
         // compile error: the controller's grant spells the mount and root out
         // in `nix/host-modules/swarm-bao.nix` (`controllerPolicyText`), which
-        // no Rust change can reach. Editing here means editing there, and
-        // `nix/module-eval.nix` asserts the other side.
+        // no Rust change can reach. Editing here means editing there.
         assert_eq!(MOUNT, "secret");
         assert_eq!(ROOT, "swarm");