diff --git a/src/mvt/android/artifacts/dumpsys_appops.py b/src/mvt/android/artifacts/dumpsys_appops.py
index 12a596a..df8539f 100644
--- a/src/mvt/android/artifacts/dumpsys_appops.py
+++ b/src/mvt/android/artifacts/dumpsys_appops.py
@@ -42,6 +42,8 @@ class DumpsysAppopsArtifact(AndroidArtifact):
 
     def check_indicators(self) -> None:
         for result in self.results:
+            # A package IOC match is not tied to one AppOps entry. Use the latest
+            # recorded access or rejection to place the package-level alert in time.
             event_time = max(
                 (
                     entry["timestamp"]