diff --git a/.gitea/workflows/converters.yml b/.gitea/workflows/converters.yml
index 73e16cb..15f21eb 100644
--- a/.gitea/workflows/converters.yml
+++ b/.gitea/workflows/converters.yml
@@ -23,10 +23,10 @@
 # Runner shape: identical to ci.yml, and for the same reason - see its header for `nodejs`.
 #
 # Access to the private repository: the per-job token (`${{ gitea.token }}`), as `release.yml`
-# uses it for this repository. If this instance does not let it read a second, private repository
-# of the same owner, the clone step fails with an authentication error; the way out is a read token
-# in 1Password, loaded with `1password/load-secrets-action` the way `ci.yml` loads its secret
-# reference (the service account sees only the CI-CD vault).
+# uses it for this repository. It can read `chemenu-testfiles` only because that repository's own
+# Actions settings grant `torben/chemenu` access - a grant set in this repository does nothing.
+# Without it the second checkout fails with "Determining the default branch ... not found", which
+# reads like a missing repository rather than a missing permission (Gitea #232, runs 699 and 701).
 
 name: Converters