From c5548e4df9f8438fa92fdf751437c5a0a0d3eed3 Mon Sep 17 00:00:00 2001
From: Eric Wendland <eric@wendland.dev>
Date: Thu, 21 May 2026 01:19:49 +0200
Subject: [PATCH] Clarify SSH proxy metadata response

---
 crates/geth-node/src/lib.rs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/crates/geth-node/src/lib.rs b/crates/geth-node/src/lib.rs
index df49763..70a6136 100644
--- a/crates/geth-node/src/lib.rs
+++ b/crates/geth-node/src/lib.rs
@@ -3675,7 +3675,7 @@ async fn handle_iroh_control_connection(
                     connected_at: UnixMillis(geth_store::now_ms()),
                     local_sshd_target: Some("127.0.0.1:22".to_owned()),
                     admin_shell_available: false,
-                    note: "authorized SSH proxy control-plane check passed; byte proxying and sshd/admin-shell connection are not implemented yet".to_owned(),
+                    note: "authorized SSH proxy metadata check passed; run geth ssh proxy for the dedicated byte stream".to_owned(),
                 })
             } else {
                 None
@@ -3690,7 +3690,7 @@ async fn handle_iroh_control_connection(
                 reason: explanation.reason,
                 evaluated_ops: explanation.evaluated_ops,
                 nonce,
-                note: "SSH proxy authenticated endpoint/card binding and required ssh_proxy.connect on resource:ssh-proxy:local; SSH is not a geth transport and byte proxying is not implemented yet".to_owned(),
+                note: "SSH proxy authenticated endpoint/card binding and required ssh_proxy.connect on resource:ssh-proxy:local; SSH is not a geth transport, and byte proxying uses the dedicated /geth/ssh-proxy/1 stream".to_owned(),
             }
         }
         PeerControlRequest::DocumentSync {