diff --git a/vaultwarden/vaultwarden.env b/vaultwarden/vaultwarden.env
index 6b1972c..c240dcf 100644
--- a/vaultwarden/vaultwarden.env
+++ b/vaultwarden/vaultwarden.env
@@ -1,5 +1,7 @@
 # Vaultwarden - Pattern B env (folder-mode); ADMIN_TOKEN/DATABASE_URL are Docker secrets
 # 2026-07: DATABASE_URL secret rotated to point at 'postgresql' alias instead of 'db'
 # as part of PostgreSQL HA migration prep (ADR-0001).
-# Retry #2: prior Woodpecker run replayed stale trigger metadata (empty CHANGED_FILES)
-# after the Gitea private-repo auth fix. This is a fresh commit to force a clean trigger.
+# Retry #3: root cause found and fixed in .woodpecker/deploy.yml -- pipeline was
+# reading CI_COMMIT_CHANGED_FILES, which does not exist in Woodpecker 3.16. Correct
+# variable is CI_PIPELINE_FILES (JSON array). This commit re-triggers provisioning
+# of vaultwarden_database_url_v2 now that the parsing logic is fixed.