The token-policy card had an info blockquote that paraphrased the two field labels, and the CORS card stated "one origin per line" three times (blockquote, DB description, muted footer). Now the CORS hint comes only from the setting description, which already includes the per-line note in both locales. The danger warning on the revoke action stays put. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>