diff --git a/hive-c0re/src/server.rs b/hive-c0re/src/server.rs
index 781caf82..1136abe8 100644
--- a/hive-c0re/src/server.rs
+++ b/hive-c0re/src/server.rs
@@ -852,8 +852,8 @@ fn is_broad_scope(scope: &LifecycleScope) -> bool {
 
 /// Assemble this hive's domain + browser-facing web URLs from c0re's
 /// service env (injected by the hyperhive NixOS module). Each field is `None` when its
-/// surface isn't browser-reachable (domain unset, forge not behind the
-/// gateway, matrix GUI off), so the CLI can hint precisely instead of
+/// surface isn't browser-reachable (domain unset, forge `publicUrl`
+/// null, matrix GUI off), so the CLI can hint precisely instead of
 /// opening a dead link. Scheme matches the existing `HIVE_FORGE_PUBLIC_URL`
 /// convention (gateway terminates TLS, so https).
 fn hive_urls() -> hive_host_sock::HiveUrls {
diff --git a/hive-host-sock/src/lib.rs b/hive-host-sock/src/lib.rs
index a2099491..ae0bbb18 100644
--- a/hive-host-sock/src/lib.rs
+++ b/hive-host-sock/src/lib.rs
@@ -212,7 +212,7 @@ pub enum HostRequest {
     /// (`services.hyperhive.domain`) plus the browser-facing home /
     /// forge / matrix URLs, daemon-sourced so custom forge/matrix
     /// domains resolve correctly. Each URL is `None` when its subsystem
-    /// is unreachable from a browser (e.g. forge not behind the gateway,
+    /// is unreachable from a browser (e.g. forge `publicUrl` null,
     /// matrix GUI disabled). Backs `hivectl open` + the federation
     /// peer-config block (which reads the bare `domain`).
     Urls,