From 5d6adb61928da5f3ef81398fd831be07ff84f2cb Mon Sep 17 00:00:00 2001
From: Keysat <licensing@keysat.xyz>
Date: Wed, 17 Jun 2026 15:24:55 -0500
Subject: [PATCH] Fix docs link and clarify server-side fingerprint hashing in
 README

---
 README.md      | 3 ++-
 pyproject.toml | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index 70e85fd..e72c0d3 100644
--- a/README.md
+++ b/README.md
@@ -25,6 +25,7 @@ ISSUER_PUBKEY_PEM = open("assets/issuer.pub").read()  # bake this into your app
 verifier = Verifier(PublicKey.from_pem(ISSUER_PUBKEY_PEM))
 
 ok = verifier.verify(key_from_user)  # raises LicensingError on bad sig
+# ok.expires_at is a unix timestamp; 0 = perpetual
 print(f"licensed for product {ok.product_id}, expires {ok.expires_at}")
 ```
 
@@ -93,7 +94,7 @@ replayed against someone else's licensing server:
 
 ```python
 fp_input = f"{APP_NAME}|{machine_id}"
-# The SDK SHA-256s this for you when you pass it to validate(...).
+# Pass this raw string to validate(...); the server SHA-256s it before storing.
 ```
 
 ## License
diff --git a/pyproject.toml b/pyproject.toml
index 36ac97f..fb6c83a 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -38,7 +38,7 @@ dev = [
 [project.urls]
 Homepage = "https://keysat.xyz"
 Repository = "https://github.com/keysat-xyz/keysat"
-Documentation = "https://github.com/keysat-xyz/keysat/blob/main/docs/INTEGRATION.md"
+Documentation = "https://github.com/keysat-xyz/keysat/blob/main/KEYSAT_INTEGRATION.md"
 
 [tool.setuptools.packages.find]
 where = ["src"]