diff --git a/servers/nh3-svos/README.md b/servers/nh3-svos/README.md
index d46d7d6..b988b56 100644
--- a/servers/nh3-svos/README.md
+++ b/servers/nh3-svos/README.md
@@ -61,7 +61,7 @@ scripts/elway infra-ops@10.100.50.43 --playbook playbooks/nh3-svos-host.yaml
   -p "Environment=XDG_DATA_HOME=/var/lib/caddy XDG_CONFIG_HOME=/var/lib/caddy" /usr/local/bin/caddy validate --config
   <file> --adapter caddyfile`, then `systemctl reload caddy-svos`. (`env $(cat /etc/caddy/env) caddy …` leaked the first
   token into sudo's argv log on 2026-10-05; it was revoked.)
-- **Tested 2026-10-05 ~1950, from mesh peer fv-ml1, against a temporary header echo on 127.0.0.1:8400 (removed after):**
+- **Tested 2026-10-05 ~1940–1946, from mesh peer fv-ml1, against a temporary header echo on 127.0.0.1:8400 (removed after):**
   - no credentials → 401 `Basic realm="SVOS"`; wrong password → 401; username `vuong` (wrong case) → 401;
   - right credentials with forged `Tailscale-User-Login`/`-Whatever`, `X-Forwarded-For/Proto/Zzz`, `Forwarded` and
     `X-Real-IP` → 200. Upstream saw exactly one `Tailscale-User-Login: Vuong`, no `Authorization`, none of the forged