diff --git a/CLAUDE.md b/CLAUDE.md
index 09126243..77862443 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -11,9 +11,8 @@ when you need depth on a subsystem. This file is the index.
   the forge, so a hardcoded loopback address fails to connect.
 - Operator/agent trust-boundary design:
   **[docs/boundary.md](docs/boundary.md)** (`area/ops` issues
-  for the deployment/gateway/privsep work — the separator is a **slash**;
-  `--label area:ops` matches nothing and silently returns *unfiltered*
-  results, which reads like a backlog rather than like an error).
+  for the deployment/gateway/privsep work — the separator is a **slash**,
+  and `--label area:ops` now fails with `did you mean "area/ops"?`).
 - Agent trust model (trust boundary, prompt-injection threat model,
   capability = accepted risk), credential isolation + sandbox threat model:
   **[docs/security.md](docs/security.md)**.