From 7145d4762f52e40bb0916a239a11fd408ae6f215 Mon Sep 17 00:00:00 2001
From: danielhanchen <23090290+danielhanchen@users.noreply.github.com>
Date: Wed, 15 Jul 2026 13:42:16 +0000
Subject: [PATCH] Fix stale docstring comment to match file-based seed delivery
 for PR #7140

---
 studio/backend/main.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/studio/backend/main.py b/studio/backend/main.py
index 76037ac4d5..675124533e 100644
--- a/studio/backend/main.py
+++ b/studio/backend/main.py
@@ -1301,8 +1301,8 @@ def setup_frontend(app: FastAPI, build_path: Path):
     def _build_index_response(request: Request) -> Response:
         # The seeded bootstrap password is never embedded in the served page: a
         # loopback reverse proxy is indistinguishable from a genuine local client,
-        # so it cannot be scoped safely. It is printed at startup and saved to
-        # .bootstrap_password; the operator copies it from there on first login.
+        # so it cannot be scoped safely. It is saved to .bootstrap_password (0600);
+        # the operator reads it from there on first login.
         content = _strip_crossorigin((build_path / "index.html").read_bytes())
         return Response(
             content = content,