diff --git a/go/permissions.go b/go/permissions.go
index de04cc8..7d4482b 100644
--- a/go/permissions.go
+++ b/go/permissions.go
@@ -147,7 +147,7 @@ type actionGate struct {
 //     is rejected before the handler runs.
 //
 //   - `CheckActionAccess` (access.go) performs the per-argument match
-//     — fs.read's `path` is checked against `permissions.read[]`,
+//     — fs.read's path argument is checked against `permissions.read[]`,
 //     net.fetch's `host:port` is checked against `permissions.net[]`,
 //     etc. Handlers in go-io / core-net / go-process call it once
 //     with the caller-supplied argument before performing any
diff --git a/go/pkg_electron_extract_tar.go b/go/pkg_electron_extract_tar.go
index ec80b24..cb8ed46 100644
--- a/go/pkg_electron_extract_tar.go
+++ b/go/pkg_electron_extract_tar.go
@@ -106,7 +106,7 @@ func openTarReader(archive, body string) (
 
 // stringReader wraps a string body with an io.Reader implementation so
 // tar/gzip layers can stream the bytes without depending on the banned
-// `strings` package. Mirrors the stringReaderAt helper in
+// stdlib strings package. Mirrors the stringReaderAt helper in
 // pkg_electron_extract.go for the zip path.
 type stringReader struct {
 	body string