diff --git a/README.md b/README.md
index 33d8a48..9045d4f 100644
--- a/README.md
+++ b/README.md
@@ -104,25 +104,23 @@ content: |
 example: true
 @end@
 ```
-Runtime Helpers
-AI_REPO_STOP(): emergency stop
+## Runtime Helpers
 
-AI_REPO_CLEAR_HISTORY(): clear dedupe history
+- AI_REPO_STOP(): emergency stop
+- AI_REPO_CLEAR_HISTORY(): clear dedupe history
+- window.AI_REPO_COMMANDER: monitor, config, tests, history
 
-window.AI_REPO_COMMANDER: monitor, config, tests, history
+## Security Model
+- Bridge key stored locally and masked, never logged
+- Field validation including path safety and typed values
+- Assistant-only and code-block-only execution by default
+- STOP immediately halts scanning and API calls
 
-Security Model
-Bridge key stored locally and masked, never logged
-
-Field validation including path safety and typed values
-
-Assistant-only and code-block-only execution by default
-
-STOP immediately halts scanning and API calls
-
-Changelog
+### Changelog
 v1.6.2
+
 Resume-safe guard; example: true support; ProseMirror paste padding; timing docs; version bump.
 
-v1.4.1 (previous)
+### v1.4.1 (previous)
+
 Tools/Settings panel, parser hardening, new routes (PRs, Issues, Releases, Tags, Rollback), per-convo dedupe + Run Again UI, streaming settle improvements, auto-submit/paste fallback, configurable timeouts/retries.
\ No newline at end of file