The proxy-grant paragraph named `prometheus-read-rbac.yaml` and `helmrelease-prometheus.yaml` by bare filename. Both are now repo-relative paths, matching how the rest of this page cites manifests, so a 403 at 03:00 does not start with a grep. Docs-only. No manifest changed. `docs/` is outside every Flux Kustomization `spec.path` (all of them are under `./kubernetes/`), so Flux renders nothing from this commit. Follow-up to Argus's non-blocking note 2 on REN-113/REN-47. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>