diff --git a/vaultwarden/vaultwarden.env b/vaultwarden/vaultwarden.env
index fa1af21..cbec656 100644
--- a/vaultwarden/vaultwarden.env
+++ b/vaultwarden/vaultwarden.env
@@ -1,7 +1,8 @@
 # Vaultwarden - Pattern B env (folder-mode); ADMIN_TOKEN/DATABASE_URL are Docker secrets
 # 2026-07: DATABASE_URL secret rotated to point at 'postgresql' alias instead of 'db'
 # as part of PostgreSQL HA migration prep (ADR-0001).
-# Retry #7: TRUE root cause found via full-length diagnostic -- Woodpecker substitutes
-# ${VAR} at pipeline-compile time (secrets absent from that map -> empty string baked
-# into the script). All runtime secret refs now escaped as $${VAR}. This trigger
-# should finally provision vaultwarden_database_url_v2 and roll the service.
+# Retry #8: retry #7's pipeline failed to compile ("missing closing brace") because
+# the new documentation header in deploy.yml itself contained a literal dollar-brace
+# example that Woodpecker's substitution engine tried to parse -- even in comments.
+# Header rewritten without literal sequences. This trigger should finally run clean:
+# provision vaultwarden_database_url_v2, deploy the stack, verify the task.