diff --git a/applet/INSTALL.md b/applet/INSTALL.md
index 6643680..fab5812 100644
--- a/applet/INSTALL.md
+++ b/applet/INSTALL.md
@@ -209,9 +209,12 @@ Document round-trips byte-for-byte against the personalized blob.
 Successful output appends:
 
 ```
-STEP-UP M2: OK — Access Document round-trip verified, 272 bytes match
+STEP-UP M2: OK — M2 step-up verified (EXCHANGE + ENVELOPE Access Document round-trip)
 ```
 
+Verified against J3R452 UID `04555A4A0B2190` on 2026-06-12 — full verdict
+log at `docs/verdicts/2026-06-12-m2-pcsc-verdict.log`.
+
 A `STEP-UP M2: FAIL` line means one of: SELECT-STEPUP didn't arm
 (no preceding AUTH1), GCM tag mismatch (key/counter divergence), or
 the recovered AD bytes don't match. The Expedited block above still