chore: cleanup code comments

scripts/README.md

@@ -3,9 +3,6 @@
 Node installation, dev-environment lifecycle, guest image builds, and verification
 tooling for Spinifex.
 
-Repo-level tooling (releases, CI infrastructure, ISO builds, beads) lives in
-[`mulga/scripts/`](../../scripts/README.md).
-
 ## Install and node setup
 
 | Script | What it does |

scripts/images/ecs-agent/manifest.conf

@@ -10,7 +10,7 @@ IMAGE_SIZE="4G"
 
 # containerd-openrc ships the OpenRC service for containerd (the containerd apk
 # itself has no init script). cni-plugins + the baked bridge conflist ready the
-# image for Sprint 4d task networking. curl is used by the first-boot CA hook and
+# image for task networking. curl is used by the first-boot CA hook and
 # IMDS probes. iproute2 supplies the full `ip` (busybox lacks `ip netns`) the
 # agent uses to build awsvpc task netns; udhcpc is busybox built-in. iptables is
 # the credential endpoint's DNAT rule (cmd/ecs-agent/credendpoint.go) fronting

scripts/images/ecs-agent/setup.sh

@@ -14,7 +14,7 @@ chmod 0755 /etc/init.d/ecs-agent /etc/init.d/ecs-ca-install
 
 # cni-plugins (alpine) installs to /usr/libexec/cni; containerd's CRI plugin
 # defaults its bin dir to /opt/cni/bin. Symlink so the baked bridge conflist
-# resolves its plugins when Sprint 4d wires task networking.
+# resolves its plugins when task networking is configured.
 mkdir -p /opt/cni
 ln -sf /usr/libexec/cni /opt/cni/bin
 

scripts/images/eks-node/eks-node-role.sh

@@ -138,7 +138,7 @@ case "${ROLE}" in
         # Managed-addon delivery runs only on the primary server: it renders
         # staged addon bundles into the K3s auto-deploy dir, which a single
         # writer owns. HA multi-server addon delivery is tracked separately
-        # (mulga-siv-231.7); server-join nodes do not run it.
+        # Server-join nodes do not run this setup.
         svc_enable mulga-eks-addon-sync
         svc_start eks-token-webhook
         svc_start mulga-eks-k3s-recovery

scripts/reset-dev-env.sh

@@ -398,8 +398,8 @@ if ip link show veth-wan-br >/dev/null 2>&1; then
     sudo ip link del veth-wan-br 2>/dev/null || true
 fi
 
-# Remove veth persistence units (Fix 1, mulga-998.b). Without this, systemd-networkd
-# recreates the veth on next reboot even after a full dev reset.
+# Remove veth persistence units. Without this, systemd-networkd recreates the
+# veth on next reboot even after a full dev reset.
 if [ -e /etc/systemd/network/15-spinifex-veth-wan.netdev ] || \
    [ -e /etc/systemd/network/15-spinifex-veth-wan.network ] || \
    [ -e /etc/systemd/network/16-spinifex-veth-wan-ovs.network ]; then

scripts/setup-ovn.sh

@@ -544,7 +544,7 @@ if [ -n "$WAN_BRIDGE" ]; then
     # when switching to any non-veth mode. Idempotent — each command uses
     # --if-exists / 2>/dev/null to tolerate absence. Without this, the
     # veth pair re-materialises on reboot and fights the current mode's
-    # bridge plumbing (Fix 1, mulga-998.b, per D17).
+    # Bridge plumbing for the host-to-OVN datapath.
     if [ "$WAN_BRIDGE_MODE" != "veth" ]; then
         sudo rm -f /etc/systemd/network/14-spinifex-br-wan.netdev \
                    /etc/systemd/network/15-spinifex-veth-wan.netdev \
@@ -621,7 +621,7 @@ if [ -n "$WAN_BRIDGE" ]; then
             # Persist the veth pair across reboot via systemd-networkd. Veths
             # are kernel-only and vanish on reboot; without persistence vpcd
             # starts with the OVS port pointing at a nonexistent peer and
-            # silently falls back to direct mode (Fix 1, mulga-998.b).
+            # silently falls back to direct mode.
             #
             # networkd's Bridge= directive requires the target bridge to be a
             # known NetDev. On ISO-installed nodes the installer writes
@@ -673,7 +673,7 @@ NETWORK
             # (enslaved via ovs-vsctl add-port above) but does not flip admin
             # state on external ports — that's networkd's job. Without this,
             # veth-wan-ovs stays DOWN after reboot, peer goes LOWERLAYERDOWN,
-            # br-wan loses carrier (Fix 1 follow-up, mulga-998.b).
+            # br-wan loses carrier.
             sudo tee "$VETH_OVS_NETWORK" >/dev/null <<NETWORK
 [Match]
 Name=veth-wan-ovs

scripts/setup.sh

@@ -860,7 +860,7 @@ print_summary() {
     echo ""
 }
 
-# --- Configure host swap (mulga-siv-251) ---
+# --- Configure host swap ---
 # Provisions an 8G swapfile and lowers vm.swappiness so spinifex.slice
 # (MemorySwapMax=100%) has a backing device for graceful degradation under
 # memory pressure. Reverses the historical swap=0 assumption. Idempotent.