diff --git a/docs/vendor-bugs/2026-06-12-st-xcube-aliro-processAUTH1ResponsePayload.md b/docs/vendor-bugs/2026-06-12-st-xcube-aliro-processAUTH1ResponsePayload.md
index 50a65bb..df18c50 100644
--- a/docs/vendor-bugs/2026-06-12-st-xcube-aliro-processAUTH1ResponsePayload.md
+++ b/docs/vendor-bugs/2026-06-12-st-xcube-aliro-processAUTH1ResponsePayload.md
@@ -12,7 +12,7 @@
 ## Reproducer
 
 - **Reader hardware:** NUCLEO-U545RE-Q + X-NUCLEO-NFC10A1 (ST25R200), STM32U535/U545 target.
-- **Reader firmware:** X-CUBE-ALIRO middleware + RFAL T=CL (X-CUBE-ALIRO version `<TBD>`).
+- **Reader firmware:** X-CUBE-ALIRO V1.0.0 (released 25-February-2026) + ST25 RFAL middleware V2.8.0 (T=CL).
 - **Card:** NXP J3R452 (also reproduces on J3R180) running our open-source Aliro applet, implementing CSA Aliro v1.0 §8.3.1.4 (Kdh via X9.63 KDF / BSI TR-03111 §4.3.3 single-step KDF with SHA-256), §8.3.1.5–.13 (HKDF salt expansion), §8.3.1.6 (AES-256-GCM AUTH1 response encryption: 12-byte IV, 16-byte tag), §8.3.1.13 (`salt_volatile` layout).
 - **Expected:** Expedited Standard AUTH1 completes; reader extracts `credential_PubK` and UD signature.
 - **Observed:** every AUTH1 response into `ACWG_processAUTH1ResponsePayload` returns `ACWG_Error_Crypto_EncryptDecrypt`. UART trace shows the retval at the call boundary; no internal context exposed.
@@ -52,4 +52,4 @@ Any of the following resolves the block:
 
 We can provide the personalized card, the captured AUTH1 request/response APDU pair, and the PC/SC reader's decrypted plaintext for ST to validate against an independent reference.
 
-**ST contact for this report:** `<TBD>` (currently filed via X-CUBE-ALIRO support channel; please advise correct routing).
+**ST contact for this report:** filing via the X-CUBE-ALIRO support form at https://www.st.com/content/st_com/en/products/embedded-software/mcu-mpu-embedded-software/stm32-embedded-software/stm32cube-expansion-packages/x-cube-aliro.html. If routing-to-engineering needs a named FAE/partner contact, please advise — happy to re-send through whichever channel ST prefers.