diff --git a/crates/wip-fs-server/src/server.rs b/crates/wip-fs-server/src/server.rs
index f725785..7ec5419 100644
--- a/crates/wip-fs-server/src/server.rs
+++ b/crates/wip-fs-server/src/server.rs
@@ -87,8 +87,9 @@ impl WipFsServer {
 
     /// Binds the built-in bounded loopback HTTP listener.
     ///
-    /// The listener is cleartext by design. Configuration must explicitly state
-    /// whether TLS is terminated by a reverse proxy or development HTTP is in use.
+    /// The built-in listener is cleartext and loopback-only. Externally visible
+    /// schemes, TLS termination, authentication, and proxy routing are deployment
+    /// concerns rather than WIP transport profiles.
     pub fn bind(self) -> Result<BoundServer, ServerBuildError> {
         let listener = TcpListener::bind(self.config.listen)
             .map_err(|error| ServerBuildError::Listener(error.to_string()))?;