diff --git a/docs/turn-loop.md b/docs/turn-loop.md
index d6e987b7..75cef004 100644
--- a/docs/turn-loop.md
+++ b/docs/turn-loop.md
@@ -462,11 +462,11 @@ Validated: must be an `http://` or `https://` URL or the empty string.
 
 **`hyperhive.matrix.url`** — homeserver URL used by
 `hive-matrix-daemon` when connecting via the matrix-sdk. Default
-points at the in-host tuwunel (`localhost:8008`), reachable over the
-host loopback in shared-netns mode. Override per-agent when an agent
-should talk to a different homeserver — for example a remote hive's
-tuwunel reached over a VPN, or an external Matrix server for a
-federation-only agent.
+(`localhost:8008`) is overridden by hive-c0re at deploy time to the
+gateway-routed `matrix.<domain>` URL so isolated agents can reach the
+homeserver. Override per-agent when an agent should talk to a
+different homeserver — for example a remote hive's tuwunel reached
+over a VPN, or an external Matrix server for a federation-only agent.
 
 ### Claude Code plugins
 
diff --git a/nix/templates/harness-base.nix b/nix/templates/harness-base.nix
index 1610fa6f..dbe0536f 100644
--- a/nix/templates/harness-base.nix
+++ b/nix/templates/harness-base.nix
@@ -1729,13 +1729,13 @@ in
         RUST_LOG = "info";
       }
       # Homeserver URL: by default the daemon inherits the host-forwarded
-      # HIVE_MATRIX_URL (set isolation-aware by hive-c0re: `matrix.<domain>`
-      # via the gateway under private-netns isolation, loopback otherwise),
-      # falling back to the daemon's built-in localhost default if the
-      # forward is absent. A per-agent `hyperhive.matrix.url` override
-      # (non-default) is set unit-level so it wins over the forwarded value;
-      # at the default we deliberately DON'T set it so the forwarded
-      # isolation-aware value isn't shadowed.
+      # HIVE_MATRIX_URL (set by hive-c0re to `matrix.<domain>` via the
+      # gateway, since agents run in private netns and can't reach host
+      # loopback directly), falling back to the daemon's built-in
+      # localhost default if the forward is absent. A per-agent
+      # `hyperhive.matrix.url` override (non-default) is set unit-level
+      # so it wins over the forwarded value; at the default we
+      # deliberately DON'T set it so the forwarded value isn't shadowed.
       // lib.optionalAttrs (config.hyperhive.matrix.url != matrixUrlDefault) {
         HIVE_MATRIX_URL = config.hyperhive.matrix.url;
       }