Text in a Word comment
A review comment in word/comments.xml is not on the page, and its text is handed to a model as ordinary prose.
How the text is hidden
Comments live in their own package part. The page shows a marker at most; the words are in the review pane. Nothing is done to the text to conceal it — it is unpainted because of where it lives.
Why a model still reads it
The part is ordinary WordprocessingML, so extractors that walk the package return the comment body inline with the document's prose. Before 0.127.0 a payload here came back clean and certified.
What we do about it
The comments part is parsed with block role comment. A run in it that carries no other concealment is graded hidden-attr, while the run's hiddenAttr flag is deliberately left false — the flag means a concealment property was applied to the run, and nothing was applied here. That also keeps the comment out of the strip rule, which excludes the role by name. The rule keys on the role plus the reason at informational, action disclose: the verdict does not move, the cleaned file is untouched, and containerVisibility reports editing-only.
How often it fires
0.82% of real commercial legal DOCX — 1,586 English contracts and agreements (corpus-legaldocx), mixed A4 and Letter, measured 2026-08-29.
This is an alert-volume number and nothing else. It says how often the alarm sounds on documents as found — not how often it is right, and not whether what it found was harmless. Documents as found may themselves carry concealment. Read it against the population named above rather than as a property of documents in general.
Check your own file
Three commands: a key, credit, a verdict.
Start with the API