diff --git a/.beads/config.json b/.beads/config.json
deleted file mode 100644
index 8ac42b9..0000000
--- a/.beads/config.json
+++ /dev/null
@@ -1 +0,0 @@
-{"issue_prefix":"TST"}
diff --git a/cfg/sandbox/anvilmcp.yaml b/cfg/sandbox/anvilmcp.yaml
index 983cdfe..d96fb18 100644
--- a/cfg/sandbox/anvilmcp.yaml
+++ b/cfg/sandbox/anvilmcp.yaml
@@ -1,5 +1,4 @@
 # Default sandbox config for anvilmcp execute_code
-# Based on hard-coded permissions from execute.go
 cwd: temp  # Use temp workspace (cleaned up after execution)
 filesystem:
   ro:
diff --git a/cfg/sandbox/default.yaml b/cfg/sandbox/default.yaml
index d0fdd2b..f1c60f7 100644
--- a/cfg/sandbox/default.yaml
+++ b/cfg/sandbox/default.yaml
@@ -1,5 +1,4 @@
 # Default role: combined most-permissive settings from all tasks/roles
-# TODO: revisit role-based permissions later
 cwd: "{CWD}"
 filesystem:
   ro: