diff --git a/docs/aws-sso.md b/docs/aws-sso.md
index cf49ae9..e7c42d4 100644
--- a/docs/aws-sso.md
+++ b/docs/aws-sso.md
@@ -180,14 +180,14 @@ The status line shows `AWS ✓ since 22:19`, `AWS ⏳ approve ABCD-EFGH`,
   the waiting CLI in with **their own** account. Still, approve only codes you
   expect, and check that the code in the browser matches the push.
 
-## Verified so far (2026-10-11, mbp-m1-2020)
+## Verified so far (mbp-m1-2020, macOS host)
 
 | Item | Status |
 |---|---|
 | `local` on a macOS host, browser still signed in: silent, ~3–7 s | verified |
 | `local` after the session ended: browser re-signed in through the IdP silently, run auto-continued | verified once (request-failed path) |
 | Session end detected before any request failed; unattended silent login (00:13, 00:47) | verified overnight 2026-10-12, but the 00:47 login came 29 min after the end (fixed: now 30 s after) |
-| Login 30 s after a capped end | unit-tested; first live run pending |
+| End read from the token cap 39 min ahead; login 45 s after it, silent, new full-hour session, no failed request | verified 2026-10-12 08:08–08:49 |
 | ntfy push: delivery, title, priority, tap link, UTF-8 body | verified against ntfy.sh |
 | `remote` end to end (code → push → approve on phone) | not yet |
 | `local` on Linux/Windows hosts | not yet |