diff --git a/scripts/ops/hermes_triage_demo.sh b/scripts/ops/hermes_triage_demo.sh
index 1cbfe14ca..f1d654a00 100755
--- a/scripts/ops/hermes_triage_demo.sh
+++ b/scripts/ops/hermes_triage_demo.sh
@@ -82,7 +82,14 @@ cmd_preflight() {
   note "fixture state: $(kubectl -n "$DEMO_NS" get cm hermes-triage-demo-fixture -o jsonpath='{.data.state}' 2>/dev/null || echo MISSING)"
   note "ariadne image: $(kubectl -n maintenance get deploy ariadne -o jsonpath='{.spec.template.spec.containers[0].image}')"
   note "autoremediation: $(kubectl -n maintenance exec deploy/ariadne -c ariadne -- printenv ARIADNE_HERMES_AUTOREMEDIATION_ENABLED 2>/dev/null)"
-  note "allowlisted jobs: $(kubectl -n maintenance exec deploy/ariadne -c ariadne -- printenv ARIADNE_HERMES_AUTOTRIAGE_JOB_ALLOWLIST 2>/dev/null)"
+  # Printed as a list rather than the raw comma-separated setting: this is the
+  # outermost safety boundary, so it is worth being able to read at a glance.
+  local allowlist count
+  allowlist="$(kubectl -n maintenance exec deploy/ariadne -c ariadne -- printenv ARIADNE_HERMES_AUTOTRIAGE_JOB_ALLOWLIST 2>/dev/null | tr ',' ' ')"
+  count=0
+  for _job in $allowlist; do count=$((count + 1)); done
+  note "jobs Ariadne may triage ($count):"
+  for _job in $allowlist; do note "  - $_job"; done
   note "hermes: $(kubectl -n hermes get pods -l app=hermes --no-headers | awk '{print $2, $3}')"
   local queued
   queued="$(jenkins_get '/queue/api/json' | python3 -c 'import json,sys; print(len(json.load(sys.stdin)["items"]))')"