diff --git a/.signpath/README.md b/.signpath/README.md
index bfe450e..b950e5f 100644
--- a/.signpath/README.md
+++ b/.signpath/README.md
@@ -1,7 +1,9 @@
 # Code signing with SignPath: prepared, off until switched on
 
-NVENCForgeGUI has applied to the [SignPath Foundation](https://signpath.org) for free
-code signing of its Windows files. Everything for it is prepared here and in
+NVENCForgeGUI plans to use free code signing from the [SignPath Foundation](https://signpath.org)
+for its Windows files. A first application in October 2026 came too early: the Foundation
+asks for more public visibility (stars, forks, external mentions), and is happy to review
+it again later. Everything for it is prepared here and in
 [`release.yml`](../.github/workflows/release.yml), but **it stays off** until it is
 switched on below. Until then every release is built and published exactly as before,
 unsigned, and its release text says so.
diff --git a/CODE_SIGNING.md b/CODE_SIGNING.md
index c4c52cf..015de03 100644
--- a/CODE_SIGNING.md
+++ b/CODE_SIGNING.md
@@ -1,11 +1,14 @@
 # Code signing policy
 
-Free code signing provided by [SignPath.io](https://about.signpath.io),
-certificate by [SignPath Foundation](https://signpath.org).
-
-> **Status:** NVENCForgeGUI has applied to the SignPath Foundation. Until
-> the signing is active, `NVENCForgeGUI.exe` is not signed. Every release
-> says in its text whether its exe is signed.
+> **Status:** `NVENCForgeGUI.exe` is not code signed yet. Free code signing
+> through the [SignPath Foundation](https://signpath.org) is planned as soon as
+> NVENCForgeGUI is known well enough to qualify. Everything for it is prepared, and
+> this policy already describes how it will work. Every release says in its
+> text whether its files are signed.
+>
+> Once signing is active: free code signing provided by
+> [SignPath.io](https://about.signpath.io), certificate by
+> [SignPath Foundation](https://signpath.org).
 
 ## What is signed
 
diff --git a/README.md b/README.md
index d767144..4b511be 100644
--- a/README.md
+++ b/README.md
@@ -147,7 +147,7 @@ The tool modes (Split, Join, DaVinci) always run one at a time. They copy instea
 
 ## 🛡️ Windows SmartScreen / antivirus warnings
 
-Windows or your antivirus may warn you the first time you run `NVENCForgeGUI.exe`. The honest reason: **the EXE is not code-signed yet.** Signing certificates cost several hundred euros *per year*, and this is a free hobby project with zero income. Free code signing through the [SignPath Foundation](https://signpath.org) is applied for and already prepared; see the [code signing policy](CODE_SIGNING.md). Until then, unsigned Go binaries are frequent false-positive targets, and all I can do is be transparent.
+Windows or your antivirus may warn you the first time you run `NVENCForgeGUI.exe`. The honest reason: **the EXE is not code-signed yet.** Signing certificates cost several hundred euros *per year*, and this is a free hobby project with zero income. Free code signing through the [SignPath Foundation](https://signpath.org) is planned and already prepared, as soon as NVENCForgeGUI is known well enough to qualify; see the [code signing policy](CODE_SIGNING.md). Until then, unsigned Go binaries are frequent false-positive targets, and all I can do is be transparent.
 
 Every release is built by GitHub Actions from this repository ([release workflow](.github/workflows/release.yml)), never on a private PC.