diff --git a/src/core/operations/ParseFuturexExcryptCommand.mjs b/src/core/operations/ParseFuturexExcryptCommand.mjs
index e3f93306..5941001f 100644
--- a/src/core/operations/ParseFuturexExcryptCommand.mjs
+++ b/src/core/operations/ParseFuturexExcryptCommand.mjs
@@ -112,8 +112,8 @@ class ParseFuturexExcryptCommand extends Operation {
 
         this.name = "HSM Parse Futurex Command";
         this.module = "Payment";
-        this.description = "Paste a Futurex Excrypt command or response into the input field as text.<br><br><b>General syntax:</b> Excrypt messages are enclosed by opening and closing delimiters, typically <code>[</code> and <code>]</code>. Inside the message, fields are semicolon-delimited. Each field is a tag/value pair, for example <code>AOECHO</code> where <code>AO</code> is the tag and <code>ECHO</code> is the value. The command code is commonly carried in the <code>AO</code> field.<br><br><b>Input:</b> raw Excrypt message text.<br><br>This operation parses the visible Excrypt message syntax, extracts semicolon-delimited fields, splits fields into tag/value pairs, and resolves the <code>AO</code> command code to a known payment command name when available from the Futurex payment integration guide.";
-        this.inlineHelp = "<strong>Syntax:</strong> <code>[tagvalue;tagvalue;...]</code> where fields are separated by semicolons and tags are typically two characters such as <code>AO</code>.<br><strong>Input:</strong> raw Futurex Excrypt message text.";
+        this.description = "Paste a Futurex Excrypt command or response into the input field as text.<br><br><b>Scope:</b> This operation performs syntax parsing only. It splits the bracketed message into tag/value fields and resolves the command code to a name when known. It does not interpret, validate, or execute the command — field values, key material, and transaction semantics are not checked.<br><br><b>General syntax:</b> Excrypt messages are enclosed by opening and closing delimiters, typically <code>[</code> and <code>]</code>. Inside the message, fields are semicolon-delimited. Each field is a tag/value pair, for example <code>AOECHO</code> where <code>AO</code> is the tag and <code>ECHO</code> is the value. The command code is commonly carried in the <code>AO</code> field.<br><br><b>Input:</b> raw Excrypt message text.";
+        this.inlineHelp = "<strong>Scope:</strong> syntax parser only — fields are split and labelled but not validated or executed.<br><strong>Syntax:</strong> <code>[tagvalue;tagvalue;...]</code> where fields are separated by semicolons and tags are typically two characters such as <code>AO</code>.<br><strong>Input:</strong> raw Futurex Excrypt message text.";
         this.testDataSamples = [
             {
                 name: "Excrypt command sample",
diff --git a/src/core/operations/ParseThalesPayShieldCommand.mjs b/src/core/operations/ParseThalesPayShieldCommand.mjs
index e8d372a6..38a3eb23 100644
--- a/src/core/operations/ParseThalesPayShieldCommand.mjs
+++ b/src/core/operations/ParseThalesPayShieldCommand.mjs
@@ -257,8 +257,8 @@ class ParseThalesPayShieldCommand extends Operation {
 
         this.name = "HSM Parse Thales Command";
         this.module = "Payment";
-        this.description = "Paste a Thales payShield 10K legacy host command or response into the input field as text.<br><br><b>General syntax:</b> optional <code>STX</code>, then <code>m</code> header characters, then a 2-character command or response code, then the command payload, then optionally an LMK suffix such as <code>%nn</code> or <code>~%nn</code>, then optionally <code>X'19'</code> and a message trailer, then optional <code>ETX</code>.<br><br><b>Input:</b> raw command text, optionally including STX/ETX framing, message header, X'19' end-message delimiter, and message trailer.<br><b>Arguments:</b> provide the configured message-header length.<br><br>This operation parses the visible payShield message syntax, identifies the two-character command/response code, resolves the manual command name when known, and extracts any trailing LMK identifier and message trailer.";
-        this.inlineHelp = "<strong>Syntax:</strong> <code>[STX][header m][code 2][payload][~][%nn][EM trailer-delimiter][trailer][ETX]</code>.<br><strong>Input:</strong> raw payShield command or response text.<br><strong>Args:</strong> set the message-header length configured on the HSM link.";
+        this.description = "Paste a Thales payShield 10K legacy host command or response into the input field as text.<br><br><b>Scope:</b> This operation performs syntax parsing only. It identifies framing delimiters, splits the header, command code, payload, LMK suffix, and message trailer into labelled fields. It does not interpret, validate, or execute the command payload — field values, key material, and transaction semantics are not checked.<br><br><b>General syntax:</b> optional <code>STX</code>, then <code>m</code> header characters, then a 2-character command or response code, then the command payload, then optionally an LMK suffix such as <code>%nn</code> or <code>~%nn</code>, then optionally <code>X'19'</code> and a message trailer, then optional <code>ETX</code>.<br><br><b>Input:</b> raw command text, optionally including STX/ETX framing, message header, X'19' end-message delimiter, and message trailer.<br><b>Arguments:</b> provide the configured message-header length.";
+        this.inlineHelp = "<strong>Scope:</strong> syntax parser only — field values are split and labelled but not validated or executed.<br><strong>Syntax:</strong> <code>[STX][header m][code 2][payload][~][%nn][EM trailer-delimiter][trailer][ETX]</code>.<br><strong>Input:</strong> raw payShield command or response text.<br><strong>Args:</strong> set the message-header length configured on the HSM link.";
         this.testDataSamples = [
             {
                 name: "Encrypt Data Block with header and trailer",