Operational: the documented list of indexed collections matches the code — it was missing comment policies, and anyone who uncommented that line would have quietly reverted every bullet to the default comment permission — CI builds against the committed lockfile, and a service DID naming a host this deployment does not serve is refused at startup instead of answering 404 for as long as it runs.