diff --git a/crates/didbot-agentd/src/cli.rs b/crates/didbot-agentd/src/cli.rs
index 2cec57be..d1a20679 100644
--- a/crates/didbot-agentd/src/cli.rs
+++ b/crates/didbot-agentd/src/cli.rs
@@ -191,7 +191,7 @@ pub fn one_line(decision: &DecisionForAgent) -> String {
     if let Some(rule) = &decision.rule {
         line.push_str(&format!(" rule={rule:?}"));
     }
-    // After the rule, because it is the rule's own sentence: an owner reads
+    // After the rule, because it is the rule's own sentence: an operator reads
     // the identifier, an agent reads the prose.
     if let Some(reason) = &decision.reason {
         line.push_str(&format!(" reason={reason:?}"));
diff --git a/crates/didbot-agentd/src/decisions.rs b/crates/didbot-agentd/src/decisions.rs
index af5f0769..b8ea4aa1 100644
--- a/crates/didbot-agentd/src/decisions.rs
+++ b/crates/didbot-agentd/src/decisions.rs
@@ -162,7 +162,7 @@ impl Record {
 impl From<&Record> for DecisionForAgent {
     fn from(record: &Record) -> Self {
         // The rule and the reason stay two fields. The rule is an identifier
-        // an owner can look up in their own policy; the reason is a sentence
+        // an operator can look up in their own policy; the reason is a sentence
         // for the agent to read. Joining them would leave an adapter to split
         // a string on a colon to get either one back.
         let (verdict, cut, rule, reason) = match &record.verdict {
@@ -636,7 +636,7 @@ mod tests {
         // No token, because there is no choice: the agent is being told what
         // happened, not asked.
         assert!(shown.token.is_none());
-        // Two fields, not one sentence: the rule is what an owner looks up,
+        // Two fields, not one sentence: the rule is what an operator looks up,
         // the reason is what the agent reads.
         assert_eq!(shown.rule.as_deref(), Some("app-allowlist"));
         assert_eq!(shown.reason.as_deref(), Some("that client is not admitted"));
diff --git a/crates/didbot-agentd/src/protocol.rs b/crates/didbot-agentd/src/protocol.rs
index db8653d1..f94bd085 100644
--- a/crates/didbot-agentd/src/protocol.rs
+++ b/crates/didbot-agentd/src/protocol.rs
@@ -271,7 +271,7 @@ pub struct DecisionForAgent {
     /// Why it was refused, in the policy's own sentence.
     ///
     /// Separate from [`DecisionForAgent::rule`] rather than folded into it:
-    /// the rule is an identifier an owner can go and look up, the reason is
+    /// the rule is an identifier an operator can go and look up, the reason is
     /// prose for the agent to read, and an adapter rendering them wants to
     /// treat the two differently. Absent unless the verdict is `deny`.
     #[serde(default, skip_serializing_if = "Option::is_none")]