1 files changed, 12 insertions, 5 deletions

diff --git a/src/rpc.cpp b/src/rpc.cpp
index 79947df..7a6b6a4 100644
--- a/src/rpc.cpp
+++ b/src/rpc.cpp
@@ -2429,11 +2429,18 @@ static std::string SerializePoolStatusLocked()
 // Publish the operator status file. Call with every payout mutex released.
 //
 // Still no version guard and no write mutex, deliberately, and the split does
-// not change the argument: RefreshStats remains the only caller, it still runs
-// only on the event loop, and it now calls this after leaving the scope that
-// serialised -- so the serialise and the write stay strictly ordered on one
-// thread and pool_status.json still has a single writer by construction. It
-// shares WriteFileAtomic so the durability rules stay in one place.
+// not change the argument: RefreshStats remains the only caller of either
+// half, in production it runs only on the event loop, and it now calls this
+// after leaving the scope that serialised -- so the serialise and the write
+// stay strictly ordered on one thread and pool_status.json still has a single
+// writer by construction. It shares WriteFileAtomic so the durability rules
+// stay in one place.
+//
+// "In production" is doing real work in that sentence. The payout-ledger
+// self-test also calls RefreshStats, from one thread at a time and with the
+// pool not running, which is why it is still a single writer there too. A
+// second concurrent caller anywhere would invalidate this paragraph and want
+// the same versioned publish the ledgers use.
 static void PublishPoolStatus(const std::string& blob)
 {
     WriteFileAtomic(PoolStatusFilePath(), blob, "pool status");