diff --git a/examples/embedded-web-app/README.md b/examples/embedded-web-app/README.md
index 36f8897a..7ab7584e 100644
--- a/examples/embedded-web-app/README.md
+++ b/examples/embedded-web-app/README.md
@@ -92,5 +92,5 @@ client (fetch mocked): its endpoints, error propagation, and the kiosk mint retr
 - **Completion is push** — the single-signer path listens for the `turbosign:completed` postMessage;
   the widget surfaces it as an `onCompleted` callback. In production, pin the listener to your known
   TurboSign origin and/or confirm via the `completed` webhook.
-- **The kiosk mints just-in-time** — a later signer's URL is created only when it's their turn; the
-  backend enforces the order.
+- **The kiosk mints just-in-time** — TurboSign won't issue a later signer's URL until it's their turn,
+  and refuses an out-of-turn signature even with a valid link.
diff --git a/examples/embedded-web-app/src/pages/Kiosk.tsx b/examples/embedded-web-app/src/pages/Kiosk.tsx
index 87e9facf..c452d51c 100644
--- a/examples/embedded-web-app/src/pages/Kiosk.tsx
+++ b/examples/embedded-web-app/src/pages/Kiosk.tsx
@@ -104,8 +104,8 @@ export function Kiosk() {
         <CardTitle className="text-xl">Everyone signs, one after another</CardTitle>
         <CardDescription>
           One document, two signers, in order, on the same device. The first signs now; when they finish, the
-          kiosk mints the next signer's URL just-in-time and loads their turn automatically. A later signer's URL
-          isn't created until it's genuinely their turn.
+          kiosk mints the next signer's URL just-in-time and loads their turn automatically. TurboSign won't issue
+          a later signer's URL until it's their turn, and refuses an out-of-turn signature even with a valid link.
         </CardDescription>
       </CardHeader>
       <CardContent className="space-y-5">