diff --git a/README.md b/README.md
index 182fd4e..db94c6f 100644
--- a/README.md
+++ b/README.md
@@ -17,12 +17,10 @@ In post‑pivot testing, misuse of CryptoTokenKit signing operations was observe
 
 ---
 
-## Observed Post-Compromise Behavior
-- **CryptoTokenKit / identityservicesd signing operations** invoked from compromised context without UI prompts.  
-  *Important:* No Secure Enclave key material was exported; observed misuse is limited to signing operations.
-- **System instability / PME behavior** — Media decode failures correlated with PME enforcement logs, GPU link errors, and mediaplaybackd variant switching, occasionally causing device stalls.
+## Observed Post‑Compromise Behavior
 
----
+- **Unauthorized signing:** CryptoTokenKit / identityservicesd invoked signing operations from a compromised context without UI prompts (no Secure Enclave key material exported).  
+- **System instability:** Media decode failures correlated with PME enforcement logs, GPU/AppleDCP link errors, mediaplaybackd variant‑switch loops and occasional launchd/SoC stalls.
 
 ## Scope of Impact
 
@@ -32,9 +30,8 @@ In post‑pivot testing, misuse of CryptoTokenKit signing operations was observe
 - **Primary component:** AudioConverterService (CoreAudio AAC decoder) — inMagicCookie heap corruption (CVE‑2025‑31200)  
 - **Chained component:** AppleBCMWLAN.dext — AMPDU handling → kernel escalation (CVE‑2025‑31201)  
 - **Privileges required:** None (initial); kernel achieved post‑chain  
-- **Immediate impact:** Unauthorized Secure Enclave–backed signing via CryptoTokenKit (no key exfiltration observed)  
-- **Collateral/system impact:** Wireless token manipulation (AWDL/IDS), PME/GPU variant‑switch stalls, launchd SoC stalls  
 - **Impact summary:** Integrity (unauthorized signing, token/device impersonation) + Availability (system stalls); Confidentiality — no key export
+
 ---
 
 ## Disclosure Timeline