From 3fce597a701d9b56393c7af59892eac97bae0aea Mon Sep 17 00:00:00 2001
From: anti <samuel@securejump.cl>
Date: Thu, 30 Apr 2026 21:19:07 -0400
Subject: [PATCH] docs(bodies): document intentional shared _body_canary in
 dispatch table

---
 decnet/realism/bodies.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/decnet/realism/bodies.py b/decnet/realism/bodies.py
index 12b7ac72..a24fb273 100644
--- a/decnet/realism/bodies.py
+++ b/decnet/realism/bodies.py
@@ -208,6 +208,9 @@ _BODIES: dict[ContentClass, Callable[[str, secrets.SystemRandom], str]] = {
     ContentClass.LOG_DAEMON: _body_log_daemon,
     ContentClass.CACHE_TMP: _body_cache_tmp,
     ContentClass.EMAIL: _body_email,
+    # All canary classes share one placeholder — content-class discriminant is the
+    # "what"; the real payload (token slug, DNS hook URL) is injected by the canary
+    # cultivator. Do not replace with distinct generators without updating cultivator.
     ContentClass.CANARY_AWS_CREDS: _body_canary,
     ContentClass.CANARY_ENV_FILE: _body_canary,
     ContentClass.CANARY_GIT_CONFIG: _body_canary,