diff --git a/_primitives/_rust/kei-auth-magiclink/Cargo.toml b/_primitives/_rust/kei-auth-magiclink/Cargo.toml
index 1630e4e..4fa3a90 100644
--- a/_primitives/_rust/kei-auth-magiclink/Cargo.toml
+++ b/_primitives/_rust/kei-auth-magiclink/Cargo.toml
@@ -3,7 +3,7 @@ name = "kei-auth-magiclink"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "AuthProvider impl for passwordless email magic-link tokens (HMAC-SHA256, stateless). Wave 7 atomar; sibling of kei-auth (multi-tenant tokens) and kei-auth-{google,github,microsoft,apple}."
+description = "AuthProvider impl for passwordless email magic-link tokens (HMAC-SHA256, stateless). Wave 7 atomar; sibling of kei-auth (multi-tenant tokens) and kei-auth-{google,apple,webauthn}."
 authors.workspace = true
 license.workspace = true
 
diff --git a/_primitives/_rust/kei-auth-webauthn/Cargo.toml b/_primitives/_rust/kei-auth-webauthn/Cargo.toml
index 428882d..096add2 100644
--- a/_primitives/_rust/kei-auth-webauthn/Cargo.toml
+++ b/_primitives/_rust/kei-auth-webauthn/Cargo.toml
@@ -3,7 +3,7 @@ name = "kei-auth-webauthn"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "WebAuthn passkey AuthProvider impl for kei-runtime-core (Wave 7 atomar). Wraps webauthn-rs 0.5; stateless ceremony APIs (registration + authentication). Sibling of kei-auth-{google,apple,github,microsoft}."
+description = "WebAuthn passkey AuthProvider impl for kei-runtime-core (Wave 7 atomar). Wraps webauthn-rs 0.5; stateless ceremony APIs (registration + authentication). Sibling of kei-auth-{google,apple,magiclink}."
 license.workspace = true
 authors.workspace = true
 
diff --git a/_primitives/_rust/kei-compute-linode/Cargo.toml b/_primitives/_rust/kei-compute-linode/Cargo.toml
index 2ee3103..85a6fdd 100644
--- a/_primitives/_rust/kei-compute-linode/Cargo.toml
+++ b/_primitives/_rust/kei-compute-linode/Cargo.toml
@@ -3,7 +3,7 @@ name = "kei-compute-linode"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "ComputeProvider impl for Linode (Akamai Cloud) v4 API. Wave 2 atomar — sibling of kei-compute-hetzner. Honors LINODE_TOKEN env ref per RULE 0.8."
+description = "ComputeProvider impl for Linode (Akamai Cloud) v4 API. Wave 2 atomar — sibling of kei-compute-{vultr,digitalocean,baremetal}. Honors LINODE_TOKEN env ref per RULE 0.8."
 authors.workspace = true
 license.workspace = true
 
diff --git a/_primitives/_rust/kei-git-forgejo/Cargo.toml b/_primitives/_rust/kei-git-forgejo/Cargo.toml
index 16ceb5f..cb87b6f 100644
--- a/_primitives/_rust/kei-git-forgejo/Cargo.toml
+++ b/_primitives/_rust/kei-git-forgejo/Cargo.toml
@@ -3,7 +3,7 @@ name = "kei-git-forgejo"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "GitBackend impl for public Forgejo (Gitea-compatible /api/v1). Wave 5 atomar; sibling of kei-git-keigit (private)."
+description = "GitBackend impl for public Forgejo (Gitea-compatible /api/v1). Wave 5 atomar; sibling of kei-git-{gitea,gitlab,bitbucket}."
 authors.workspace = true
 license.workspace = true
 
diff --git a/_primitives/_rust/kei-net-ipsec/Cargo.toml b/_primitives/_rust/kei-net-ipsec/Cargo.toml
index e6221fc..d6772dd 100644
--- a/_primitives/_rust/kei-net-ipsec/Cargo.toml
+++ b/_primitives/_rust/kei-net-ipsec/Cargo.toml
@@ -3,7 +3,7 @@ name = "kei-net-ipsec"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "Wave 9 — IPsec NetworkMode impl for kei-runtime-core via strongSwan / swanctl shell-out. Public-IP path; sibling of kei-net-tailscale (private-only) and kei-net-wireguard (private-only)."
+description = "Wave 9 — IPsec NetworkMode impl for kei-runtime-core via strongSwan / swanctl shell-out. Public-IP path; sibling of kei-net-wireguard (private-only) and kei-net-openvpn."
 license.workspace = true
 authors.workspace = true
 
diff --git a/_primitives/_rust/kei-net-wireguard/Cargo.toml b/_primitives/_rust/kei-net-wireguard/Cargo.toml
index 936574c..7b86cf5 100644
--- a/_primitives/_rust/kei-net-wireguard/Cargo.toml
+++ b/_primitives/_rust/kei-net-wireguard/Cargo.toml
@@ -3,7 +3,7 @@ name = "kei-net-wireguard"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "Wave 9 — WireGuard NetworkMode adapter via wg-quick + wg shell-out (private mesh, is_public=false). Sibling of kei-net-tailscale; glued by kei-runtime-core::traits::network."
+description = "Wave 9 — WireGuard NetworkMode adapter via wg-quick + wg shell-out (private mesh, is_public=false). Sibling of kei-net-{openvpn,ipsec}; glued by kei-runtime-core::traits::network."
 authors.workspace = true
 license.workspace = true
 
diff --git a/_primitives/_rust/kei-notify-discord/Cargo.toml b/_primitives/_rust/kei-notify-discord/Cargo.toml
index 16be601..15a12f6 100644
--- a/_primitives/_rust/kei-notify-discord/Cargo.toml
+++ b/_primitives/_rust/kei-notify-discord/Cargo.toml
@@ -3,7 +3,7 @@ name = "kei-notify-discord"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "NotifyChannel impl for Discord webhooks. Wave 8 atomar; sibling of kei-notify-email and kei-notify-slack."
+description = "NotifyChannel impl for Discord webhooks. Wave 8 atomar; sibling of kei-notify-{telegram,slack,sms}."
 authors.workspace = true
 license.workspace = true
 
diff --git a/_primitives/_rust/kei-provision/Cargo.toml b/_primitives/_rust/kei-provision/Cargo.toml
index 8f53f37..663e0f6 100644
--- a/_primitives/_rust/kei-provision/Cargo.toml
+++ b/_primitives/_rust/kei-provision/Cargo.toml
@@ -3,7 +3,7 @@ name = "kei-provision"
 version = "0.1.0"
 edition.workspace = true
 rust-version.workspace = true
-description = "Unified VPS provisioner — one CLI for Hetzner / Vultr / (future) AWS / DO / Linode. Supersedes provision-hetzner.sh + provision-vultr.sh."
+description = "Unified VPS provisioner — one CLI for Vultr / Linode / DigitalOcean / baremetal. Supersedes provision-vultr.sh."
 authors.workspace = true
 license.workspace = true
 
@@ -27,6 +27,6 @@ tempfile = { workspace = true }
 
 [package.metadata.keisei]
 backend = "external-cli"
-description = "Shells out to `hcloud` (Hetzner) or `vultr-cli` (Vultr). Parses JSON output. Honors HCLOUD_TOKEN / VULTR_API_KEY env refs per RULE 0.8."
+description = "Shells out to `vultr-cli` (Vultr) / `linode-cli` (Linode) / `doctl` (DigitalOcean). Parses JSON output. Honors VULTR_API_KEY / LINODE_TOKEN / DIGITALOCEAN_TOKEN env refs per RULE 0.8."
 authors = ["Denis Parfionovich <parfionovich@keilab.io>"]
-supersedes = ["provision-hetzner.sh", "provision-vultr.sh"]
+supersedes = ["provision-vultr.sh"]