diff --git a/client/internal/pqkem/callbacks.go b/client/internal/pqkem/callbacks.go
index 3302e2e66..3e22a04d4 100644
--- a/client/internal/pqkem/callbacks.go
+++ b/client/internal/pqkem/callbacks.go
@@ -6,9 +6,11 @@ package pqkem
 // the KEM code be extracted as a standalone library.
 type CallbackHandler interface {
 	// OnNewPSKReady fires when a fresh post-quantum PSK has been derived for a peer
-	// and must be programmed into the consumer's secure channel. It is invoked at
-	// the commit point of each side: the initiator on receiving the answer, the
-	// responder on receiving the confirm.
+	// and must be programmed into the consumer's secure channel. The protocol has no
+	// explicit confirm: the initiator fires it on receiving the answer, the responder
+	// fires it right after deriving the PSK from the offer and before sending that
+	// answer. A fired callback therefore means the key is derived locally, not that the
+	// peer has confirmed it — the next offer is the later acknowledgement.
 	OnNewPSKReady(remoteID RemoteID, psk PSK) error
 
 	// OnRekeyFailed fires when an exchange fails to converge within the allotted