diff --git a/CLAUDE.md b/CLAUDE.md
index 296e205..b6c380f 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -75,7 +75,7 @@ secrets              # CLI script (~2000 lines bash)
 hooks/pre-commit     # Pre-commit hook template
 test/
   secrets.bats       # bats-core test suite (133 tests)
-  manifest.bats      # EGB-677 .secrets.json manifest tests (60 tests)
+  manifest.bats      # EGB-677 .secrets.json manifest tests (77 tests)
   test_helper.bash   # Shared setup/teardown
 README.md            # User-facing documentation
 CLAUDE.md            # This file
diff --git a/README.md b/README.md
index e79fc15..b92f7a5 100644
--- a/README.md
+++ b/README.md
@@ -493,10 +493,12 @@ For complete rotation with no historical exposure, create a fresh `~/.secrets/`
 
 **"'jq' is not installed"** — Manifest features need `jq`. The error prints the install command for your platform. Manifest-less projects work without it.
 
+**Not sure the store is intact?** — Run `secrets verify` in a project to check its `.secrets.json` against the store (declared-but-missing blobs and orphaned blobs) and decrypt-test every blob with your current key. Use `secrets verify --all` for a store-wide decrypt sweep across every project. It's read-only — plaintext is streamed to `/dev/null`, never written to disk — and exits non-zero if anything is wrong, so it's safe to run in CI.
+
 ## Development
 
 ```bash
-# Run the test suite (193 tests across both files)
+# Run the test suite (210 tests across both files)
 brew install bats-core
 bats test/