diff --git a/docs/design/13-toolchain-and-dev-workflow.md b/docs/design/13-toolchain-and-dev-workflow.md
index 42b1b98..005cc25 100644
--- a/docs/design/13-toolchain-and-dev-workflow.md
+++ b/docs/design/13-toolchain-and-dev-workflow.md
@@ -1713,7 +1713,7 @@ async def handle_gitea_webhook(
     
     body = await request.body()
     
-    # 1. 签名验证（可选）
+    # 1. 签名验证（可选，假设 Gitea 使用 HMAC-SHA256，需根据 Gitea 版本确认）
     if GITEA_WEBHOOK_SECRET:
         expected = hmac.new(GITEA_WEBHOOK_SECRET.encode(), body, sha256).hexdigest()
         if not hmac.compare_digest(expected, (x_gitea_signature or "")):