diff --git a/README.md b/README.md
index 77ef5c5..5b8338d 100644
--- a/README.md
+++ b/README.md
@@ -1,16 +1,16 @@
 # agentrust-io demos
 
-Runnable demos for [cMCP](https://github.com/agentrust-io/cmcp), [TRACE](https://github.com/agentrust-io/trace-spec), and [WCM](https://pypi.org/project/weight-custody-manifest/). Nine demos, ~10 minutes total.
+Runnable demos for [cMCP](https://github.com/agentrust-io/cmcp), [TRACE](https://github.com/agentrust-io/trace-spec), and [WCM](https://pypi.org/project/weight-custody-manifest/). Ten demos, ~12 minutes total.
 
 ---
 
 ## Prerequisites
 
 ```
-pip install cmcp-runtime weight-custody-manifest
+pip install -r requirements.txt
 ```
 
-`cmcp-runtime` includes all dependencies (`starlette`, `uvicorn`, `cmcp-verify`) and drives demos 1 through 5; `weight-custody-manifest` (from PyPI) drives demos 6 through 9. All demos use `CMCP_DEV_MODE=1` (software-only TEE, no hardware required). The local MCP server performs real filesystem operations on `./workspace/`.
+The requirements install cMCP for demos 1 through 5, Weight Custody Manifest for demos 6 through 9, and the OpenAI client used by demo 10. All demos use `CMCP_DEV_MODE=1` (software-only TEE, no hardware required). The local MCP server performs real filesystem operations on `./workspace/`.
 
 ## Quick start: one command
 
diff --git a/demo.py b/demo.py
index 587db63..2ff5066 100644
--- a/demo.py
+++ b/demo.py
@@ -3,7 +3,7 @@
 
     python demo.py              # run all, pausing before each (for live talks)
     python demo.py --no-pause   # run straight through, no prompts
-    python demo.py 2            # run only demo 2 (1 through 9)
+    python demo.py 2            # run only demo 2 (1 through 10)
 
 The trust chain, end to end:
     Demo 1  cMCP enforces Cedar on every tool call and signs a TRACE claim.