diff --git a/agentic-ai/Claude/CLAUDE.md b/agentic-ai/Claude/CLAUDE.md
index 1b70d78..edd162d 100644
--- a/agentic-ai/Claude/CLAUDE.md
+++ b/agentic-ai/Claude/CLAUDE.md
@@ -15,7 +15,7 @@ next to this file.
 <!-- railguard:start -->
 # Railguard - Active Guardrails
 
-Railguard monitors every tool call in this session: allow, ask, or block. If a command is blocked, do NOT re-issue it with cosmetic changes (new flags, encoding, wrappers) - take a genuinely different approach. On ask, wait for the human. File writes are snapshotted and can be rolled back.
+Railguard monitors every tool call in this session: allow, ask, or block. If a command is blocked, do NOT re-issue it with cosmetic changes (new flags, encoding, wrappers) - take a genuinely different approach. On ask, wait for the human. File writes and approved memory deletions are snapshotted and can be rolled back.
 
 Full agent guide (rollback commands, policy customization, path-fence quirks, self-protection): run `railguard guide`.
 
diff --git a/agentic-ai/Claude/railguard.yaml b/agentic-ai/Claude/railguard.yaml
index cf30a69..1126edc 100644
--- a/agentic-ai/Claude/railguard.yaml
+++ b/agentic-ai/Claude/railguard.yaml
@@ -33,12 +33,9 @@ fence:
   allowed_paths:
     - "~/.claude"
     - "/tmp"
+    # Paths are case-sensitive, supporting both
     - "~/github"
     - "~/Github"
-    # Both cases: the fence matches literally and Linux paths are
-    # case-sensitive, so "~/Bitbucket" alone never matched the actual
-    # ~/bitbucket checkouts — which is why projects there had to enumerate
-    # every subpath by hand.
     - "~/bitbucket"
     - "~/Bitbucket"
   denied_paths: