diff --git a/.2119/verdicts/REQ-003.4.2.json b/.2119/verdicts/REQ-003.4.2.json
index 3d6cf2d..32291ef 100644
--- a/.2119/verdicts/REQ-003.4.2.json
+++ b/.2119/verdicts/REQ-003.4.2.json
@@ -1,8 +1,8 @@
 {
-  "reviewId": "REQ-003.4.2--2558ff342f6b",
+  "reviewId": "REQ-003.4.2--3e386c0febf7",
   "requirementId": "REQ-003.4.2",
-  "hash": "2558ff342f6b",
+  "hash": "3e386c0febf7",
   "verdict": "pass",
   "summary": "Risks section states the self-pass residual risk plainly and names the committed-verdict, hash-invalidation, and CI re-run mitigations",
-  "timestamp": "2026-08-08T08:53:49.315Z"
+  "timestamp": "2026-08-08T09:06:52.659Z"
 }
diff --git a/.2119/verdicts/REQ-005.2.6.json b/.2119/verdicts/REQ-005.2.6.json
index 07de5d4..c2cce7c 100644
--- a/.2119/verdicts/REQ-005.2.6.json
+++ b/.2119/verdicts/REQ-005.2.6.json
@@ -1,8 +1,8 @@
 {
-  "reviewId": "REQ-005.2.6--403de8d5f77f",
+  "reviewId": "REQ-005.2.6--cf4818fa400c",
   "requirementId": "REQ-005.2.6",
-  "hash": "403de8d5f77f",
+  "hash": "cf4818fa400c",
   "verdict": "pass",
   "summary": "Verify-tag docs state arbitrary-shell execution and package.json-script trust equivalence beside the [verify] semantics",
-  "timestamp": "2026-08-08T08:53:49.450Z"
+  "timestamp": "2026-08-08T09:06:58.759Z"
 }
diff --git a/.2119/verdicts/REQ-008.1.2.json b/.2119/verdicts/REQ-008.1.2.json
index 55f18a6..392d17f 100644
--- a/.2119/verdicts/REQ-008.1.2.json
+++ b/.2119/verdicts/REQ-008.1.2.json
@@ -1,8 +1,8 @@
 {
-  "reviewId": "REQ-008.1.2--664c5abc793a",
+  "reviewId": "REQ-008.1.2--4d6b2a51f53e",
   "requirementId": "REQ-008.1.2",
-  "hash": "664c5abc793a",
+  "hash": "4d6b2a51f53e",
   "verdict": "pass",
-  "summary": "Header block states all three exclusions bolded with the design.md link before any install command; numbered trio restates them before the adoption section",
-  "timestamp": "2026-08-08T08:53:49.587Z"
+  "summary": "README header block prominently states 2119 is not a test runner, CI replacement, or security boundary with the design.md link, before the adoption section",
+  "timestamp": "2026-08-08T09:07:04.379Z"
 }
diff --git a/.2119/verdicts/REQ-008.2.2.json b/.2119/verdicts/REQ-008.2.2.json
index 175555b..7690ba1 100644
--- a/.2119/verdicts/REQ-008.2.2.json
+++ b/.2119/verdicts/REQ-008.2.2.json
@@ -1,8 +1,8 @@
 {
-  "reviewId": "REQ-008.2.2--5308de176d8b",
+  "reviewId": "REQ-008.2.2--aa836f47efc5",
   "requirementId": "REQ-008.2.2",
-  "hash": "5308de176d8b",
+  "hash": "aa836f47efc5",
   "verdict": "pass",
   "summary": "README's Diversify-then-audit bullet and scaling.md's cross-provider audit section both advise periodic sweeps plus targeted audits of challenging or high-consequence requirements",
-  "timestamp": "2026-08-08T08:53:49.719Z"
+  "timestamp": "2026-08-08T09:07:17.187Z"
 }
diff --git a/README.md b/README.md
index 8273478..094c063 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,9 @@
 # 2119
 
-**Spec-driven test enforcement for coding agents — a gate your agent can't quietly game.** Named for [RFC 2119](https://www.rfc-editor.org/rfc/rfc2119).
+**Specs your agents will follow & tests they can't fake.**
+
+Spec-driven test enforcement for coding agents, named for
+[RFC 2119](https://www.rfc-editor.org/rfc/rfc2119).
 
 - **Plans become numbered requirements** — specs where every MUST is individually addressable, and `2119 lint` enforces the format.
 - **Every requirement gets a test that could actually fail** — `2119 cover` fails on missing tests; a *fresh-context* reviewer judges each one: *would these tests fail if this requirement were violated?*