diff --git a/pkg/service/handlers/handlers_bmx.go b/pkg/service/handlers/handlers_bmx.go
index 2368f5f..72ddd3a 100644
--- a/pkg/service/handlers/handlers_bmx.go
+++ b/pkg/service/handlers/handlers_bmx.go
@@ -105,7 +105,7 @@ func (s *Server) applyBMXTemplate(content string) string {
 // disabled (log-only); kept as the future-restore point — when we re-add
 // the gate, callers will use this helper.
 //
-//nolint:unused // intentional: future-restore point for the disabled auth gate.
+//lint:ignore U1000 intentional: future-restore point for the disabled BMX auth gate
 func (s *Server) writeBMXUnauthorized(w http.ResponseWriter) {
 	w.Header().Set("Content-Type", "text/html; charset=utf-8")
 	w.WriteHeader(http.StatusUnauthorized)
diff --git a/pkg/service/handlers/handlers_etag_test.go b/pkg/service/handlers/handlers_etag_test.go
index 59ef84d..2aae0b8 100644
--- a/pkg/service/handlers/handlers_etag_test.go
+++ b/pkg/service/handlers/handlers_etag_test.go
@@ -225,6 +225,7 @@ func TestMargeETags(t *testing.T) {
 		_ = pyProxy.ModifyResponse(resp)
 
 		//nolint:canonicalheader
+		//lint:ignore SA1008 ETag header key is intentionally non-canonical; Bose speakers reject the canonicalized form
 		if _, ok := resp.Header[caseSensitiveETag]; !ok {
 			t.Errorf("ModifyResponse did not normalize ETag casing. Headers: %v", resp.Header)
 		}
@@ -267,6 +268,7 @@ func TestMargeETags(t *testing.T) {
 		}
 
 		//nolint:canonicalheader
+		//lint:ignore SA1008 ETag header key is intentionally non-canonical; Bose speakers reject the canonicalized form
 		if _, ok := h[caseSensitiveETag]; ok {
 			// In Go's map, "ETag" and "Etag" are different keys.
 			// Set() uses CanonicalHeaderKey which produces "Etag" (lowercase 't').
diff --git a/pkg/service/handlers/mac_mapping_integration_test.go b/pkg/service/handlers/mac_mapping_integration_test.go
index 5993284..a16c8e4 100644
--- a/pkg/service/handlers/mac_mapping_integration_test.go
+++ b/pkg/service/handlers/mac_mapping_integration_test.go
@@ -223,6 +223,7 @@ func TestMacMappingIntegration_HTTPHandler(t *testing.T) {
 		// Extract ETag from response headers (direct access needed for httptest.ResponseRecorder)
 		etag := ""
 		//nolint:staticcheck // SA1008: ETag header name must be case-sensitive for test
+		//lint:ignore SA1008 ETag header key is intentionally non-canonical; Bose speakers reject the canonicalized form
 		if vals, ok := rr1.Header()["ETag"]; ok && len(vals) > 0 {
 			etag = vals[0]
 		}