diff --git a/crates/hephd/src/server.rs b/crates/hephd/src/server.rs
index 16e7494..bf245ba 100644
--- a/crates/hephd/src/server.rs
+++ b/crates/hephd/src/server.rs
@@ -124,8 +124,13 @@ impl Daemon {
     }
 
     /// If self-update is enabled, spawn its background poller: every
-    /// `cfg.interval` it checks the forge for a newer release and (for now) logs
-    /// when one is available. No-op when the mode is off.
+    /// `cfg.interval` it checks the forge for a newer release and, when one is
+    /// found, installs it and restarts onto the new binary. No-op when off.
+    ///
+    /// Note: the *apply* path runs `cargo install` and exits, which only works
+    /// when the daemon's service environment can reach the forge over SSH and
+    /// find cargo — see the `service-env-forge-access` card (the deployment step
+    /// that makes this operational).
     pub fn spawn_self_update_loop(&self) {
         let Some(cfg) = self.ctx.self_update.clone() else {
             return;