diff --git a/.hyperi-ci.yaml b/.hyperi-ci.yaml
index 0d6680f3..95590e91 100644
--- a/.hyperi-ci.yaml
+++ b/.hyperi-ci.yaml
@@ -4,9 +4,7 @@
 #
 # License:   BUSL-1.1
 # Copyright: (c) 2026 HYPERI PTY LIMITED
-#
-# Override defaults with HYPERCI_* env vars.
-# Reference: config/defaults.yaml in hyperi-ci.
+
 classification: product
 
 language: typescript
@@ -21,15 +19,10 @@ build:
     - native
 release:
   enabled: true
-  # dfe-ui is a private, deployed application ("private": true), not an npm
-  # library -- opt out of the default npm publish (destinations.npm: npmjs)
-  # so the release stage does not try to `npm publish` (which fails on the
-  # missing NPM_TOKEN). Only the container ships.
+  # A deployed app, not an npm library: only the container ships.
   destinations:
     npm: false
-  # Build + publish the container to ghcr.io/hyperi-io/dfe-ui. Explicit `true`
-  # (not the default `auto`) so a missing/broken Dockerfile fails the build loudly
-  # -- dfe-ui is a deployed service, the image must always ship.
+  # `true`, not `auto`, so a missing Dockerfile fails the build.
   container:
     enabled: true
     dockerfile: Dockerfile
diff --git a/Dockerfile b/Dockerfile
index 63a6c9f8..02d05500 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,12 +5,8 @@
 # License:   BUSL-1.1
 # Copyright: (c) 2026 HYPERI PTY LIMITED
 #
-# Auto-built + published to ghcr.io/hyperi-io/dfe-ui by hyperi-ci (container
-# publish is auto-on-Dockerfile-presence). Next.js standalone output (see
-# apps/dfe-core-ui/next.config.ts: output 'standalone' + outputFileTracingRoot at
-# the monorepo root) gives a minimal runtime: a self-contained server + the
-# traced workspace deps. yarn 4 (berry, node-modules linker) via corepack; turbo
-# builds the app + its @repo/* workspace packages.
+# Next.js standalone output (apps/dfe-core-ui/next.config.ts) gives a
+# self-contained server plus the traced workspace deps.
 
 # Trixie by name: the bare node:24-slim tag is still Debian 12. Renovate moves the digest.
 ARG NODE_IMAGE=node:24-trixie-slim@sha256:43b9ba1142b8dcf33fa8f922ca1be85714adc444e0586c7cf7726daaeabc1bea
diff --git a/apps/dfe-core-ui/e2e/config/appManagement.helpers.ts b/apps/dfe-core-ui/e2e/config/appManagement.helpers.ts
index cf11b51d..c318bd31 100644
--- a/apps/dfe-core-ui/e2e/config/appManagement.helpers.ts
+++ b/apps/dfe-core-ui/e2e/config/appManagement.helpers.ts
@@ -10,8 +10,7 @@ import { SeedRequest } from './e2e.client.types';
  * the source registry, so they fail for more than one reason. The endpoint
  * turns every one of them into a bare 500 "internal_error" (dfe-engine#452), so
  * the status and the raw body go into the message and the reason itself is one
- * `docker logs` away. Do not guess a cause here again: the guess that used to
- * live on this line named DFE_ENGINE_GITOPS_ENABLED and cost a session.
+ * `docker logs` away.
  */
 export const seedAppManagement = async ({
   playwright,
diff --git a/apps/dfe-core-ui/src/core/config/api/client.types.ts b/apps/dfe-core-ui/src/core/config/api/client.types.ts
index 1198bf4d..3fcf6e0f 100644
--- a/apps/dfe-core-ui/src/core/config/api/client.types.ts
+++ b/apps/dfe-core-ui/src/core/config/api/client.types.ts
@@ -59,7 +59,7 @@ type DfeClientQueryParams<Op> = Op extends { parameters: { query?: infer Q } }
  * Header parameters when the operation declares them.
  *
  * Only headers the spec puts on that one operation are expressible, so this is
- * not a general escape hatch for setting arbitrary headers - today it is
+ * not a general escape hatch for setting arbitrary headers, such as
  * `If-Match` on the writes the engine guards. A header typed `string | null`
  * is omitted entirely when null, which is what an unguarded first write needs.
  */