diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 9096c90..e038054 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -6,15 +6,13 @@ and welcomes outside pull requests.
 ## Prerequisites
 
 - **Go 1.25.0** or later.
-- **CGO enabled** (`CGO_ENABLED=1`, the default on most systems) — the
-  SQLite driver (`mattn/go-sqlite3`) requires a C compiler (`gcc` or
-  `clang`) to be on your `PATH`.
 - **Docker** (optional) — only needed to run the full quickstart described
   in `README.md`; not required to build, test, or contribute code.
 
-No database, API keys, or secrets are needed to build or run the test
-suite. Every test either uses an in-memory/temp-file SQLite database or a
-local `httptest` server.
+No C compiler, database, API keys, or secrets are needed to build or run
+`make test`. The SQLite driver is pure Go. Every test either uses an
+in-memory/temp-file SQLite database or a local `httptest` server. The
+optional `-race` check below does require a C compiler.
 
 ## Build, test, and lint
 
diff --git a/Makefile b/Makefile
index f7af84d..691b817 100644
--- a/Makefile
+++ b/Makefile
@@ -1,16 +1,16 @@
 .PHONY: build build-verify run test docker lint clean
 
 build:
-	CGO_ENABLED=1 go build -o bin/agentgate ./cmd/agentgw
+	CGO_ENABLED=0 go build -o bin/agentgate ./cmd/agentgw
 
 build-verify:
-	CGO_ENABLED=1 go build -o bin/agentgate-verify ./cmd/agentgate-verify
+	CGO_ENABLED=0 go build -o bin/agentgate-verify ./cmd/agentgate-verify
 
 run:
-	go run ./cmd/agentgw
+	CGO_ENABLED=0 go run ./cmd/agentgw
 
 test:
-	go test -v -count=1 ./...
+	CGO_ENABLED=0 go test -v -count=1 ./...
 
 docker:
 	docker-compose up --build
diff --git a/README.md b/README.md
index a5136ee..08b0e56 100644
--- a/README.md
+++ b/README.md
@@ -52,6 +52,12 @@ curl -s -X POST http://localhost:8080/admin/link \
 # open the returned authorize_url, click Authorize, then re-run the /v1/act call above
 ```
 
+**Inspect the receipt ledger.** Open
+[`http://localhost:8080/dashboard/`](http://localhost:8080/dashboard/) and
+enter the gateway URL, then the value of `AGENTGATE_ADMIN_SECRET`. The
+dashboard checks the visible receipt chain locally. Use the standalone
+verifier below for full cryptographic proof.
+
 ### Auditing, standalone
 
 Verification never depends on the gateway, Docker, or a Go toolchain — it