milestone 19: hygiene sweep - dead ecs surface, single-source constants, tls classification, frontend state hazards, docker smoke network fix

src/filter/manager.zig

@@ -289,7 +289,7 @@ pub const Manager = struct {
     /// what every test and `nxdns check` want. Only the scheduler consults it —
     /// see `refreshGated`.
     monitor: ?*disk_monitor.Monitor = null,
-    /// Scheduled refresh passes skipped by the disk gate. Phase 8's health
+    /// Scheduled refresh passes skipped by the disk gate. The `/api/health`
     /// rollup reads it through `refreshesGated`.
     refreshes_gated: std.atomic.Value(u64) = .init(0),
 
@@ -610,8 +610,8 @@ pub const Manager = struct {
     ///
     /// The status entry is found by row id, so a source added since the last
     /// `reload` has nowhere to record its outcome. `refreshAll` syncs the table
-    /// before it refreshes anything, which is why it is the entry point Phase 8
-    /// and the scheduler use.
+    /// before it refreshes anything, which is why `POST /api/blocklists/update`
+    /// and the scheduler both enter through `refreshAll`.
     pub fn refreshSource(self: *Manager, io: std.Io, row: sources_repo.SourceRow) Error!bool {
         self.refresh_lock.lockUncancelable(io);
         defer self.refresh_lock.unlock(io);
@@ -1142,7 +1142,8 @@ pub const Manager = struct {
     /// a critically full disk must not take.
     ///
     /// `reload` and `refreshAll` are deliberately not gated: both are operator
-    /// actions (the composition root's startup load, Phase 8's manual refresh),
+    /// actions (the composition root's startup load, `POST
+    /// /api/blocklists/update`),
     /// and an operator who asks for a refresh on a full disk has asked for it.
     ///
     /// Counting happens here, so a caller cannot skip a pass without recording