diff --git a/README.md b/README.md
index d7b0415..fb20477 100644
--- a/README.md
+++ b/README.md
@@ -34,7 +34,7 @@ Use this deployment to test an implementation.
 
 | Example                                                | Description                                            |
 | :----------------------------------------------------- | :----------------------------------------------------- |
-| [Cloudflare Workers](./examples/verification-workers/) | Verify RFC 9421 `Signature` for every incoming request |
+| [Cloudflare Workers](./examples/verification-workers/) | Sign scheduled requests and verify incoming signatures |
 | [Caddy Plugin](./examples/caddy-plugin/)               | Verify RFC 9421 `Signature` for every incoming request |
 | [Rust](./examples/rust/)                               | Verify a sample test request                           |
 
diff --git a/examples/caddy-plugin/README.md b/examples/caddy-plugin/README.md
index 026382b..9cb00df 100644
--- a/examples/caddy-plugin/README.md
+++ b/examples/caddy-plugin/README.md
@@ -45,7 +45,7 @@ And finally, you run caddy
 
 To generate a signed request, you can use the sibling [browser extension](../browser-extension).
 
-`directory_base` is the direct directory mode. `registry` is experimental registry draft support and can be repeated. `fail_on_load_error` defaults to `false`; set it to `true` if Caddy should fail provisioning when directories, registries, cards, IP lists, or keys cannot be loaded.
+`directory_base` is the direct directory mode. `registry` is experimental registry draft support and can be repeated. Keys are loaded during provisioning, so changes require a Caddy reload. `fail_on_load_error` defaults to `false`, returning 503 when no validator was loaded; set it to `true` to fail provisioning instead.
 
 ## Security Considerations
 
diff --git a/packages/web-bot-auth/README.md b/packages/web-bot-auth/README.md
index 6e61ec1..6623eb5 100644
--- a/packages/web-bot-auth/README.md
+++ b/packages/web-bot-auth/README.md
@@ -23,7 +23,7 @@ TypeScript helpers for Web Bot Auth, as described in [draft-meunier-webbotauth-h
 
 ## Usage
 
-This section shows basic signing and verification.
+This section shows basic signing and verification. To select one of several signatures, pass its `label` to `verify`; verify each label separately when all signatures matter.
 More concrete examples are provided on [cloudflareresearch/web-bot-auth/examples](https://github.com/cloudflareresearch/web-bot-auth#examples).
 
 ### Research server for debug purposes