diff --git a/lib/deploy-substrate/deploy-substrate.template.yaml b/lib/deploy-substrate/deploy-substrate.template.yaml
index 638277c..380c4d2 100644
--- a/lib/deploy-substrate/deploy-substrate.template.yaml
+++ b/lib/deploy-substrate/deploy-substrate.template.yaml
@@ -217,7 +217,7 @@ Resources:
   # intersection of the role's own policies and this boundary, so a misconfigured
   # SAM role can never exceed what is listed here.
   #
-  # SCOPING RULE (PLAT-52). New workloads get their own ManagedPolicy
+  # SCOPING RULE (PLAT-52). Remaining SAM workloads get their own ManagedPolicy
   # seahaven-lambda-execution-boundary-<workload>: the four-statement floor
   # (CloudWatchLogsWrite / CloudWatchLogsDescribe / XRay / Ec2Eni) plus that
   # workload's data plane, derived from its own template. The shared