diff --git a/docs/marlin_demo.md b/docs/marlin_demo.md
index 28c2b14..c46d524 100644
--- a/docs/marlin_demo.md
+++ b/docs/marlin_demo.md
@@ -109,7 +109,9 @@ marlin attr set '~/marlin_demo/Reports/*.pdf'          reviewed yes
 ```bash
 marlin search TODO
 marlin search tag:project/md
-marlin search 'tag:logs/app AND ERROR'
+# Content search arrives in Phase 3. For now, grep the logs directly:
+# marlin search 'tag:logs/app AND ERROR'
+grep ERROR ~/marlin_demo/Logs/app.log
 marlin search 'attr:status=complete'
 marlin search 'attr:reviewed=yes AND pdf'
 marlin search 'attr:reviewed=yes' --exec 'xdg-open {}'
diff --git a/run_all_tests.sh b/run_all_tests.sh
old mode 100755
new mode 100644
index c0eef60..7b1e32f
--- a/run_all_tests.sh
+++ b/run_all_tests.sh
@@ -261,7 +261,8 @@ test_marlin_demo_flow() {
     log_info "Running search commands..."
     run_cmd "${marlin_cmd}" search TODO | grep "TODO.txt" || (log_error "Search TODO failed"; exit 1)
     run_cmd "${marlin_cmd}" search tag:project/md | grep "draft1.md" || (log_error "Search tag:project/md failed"; exit 1)
-    run_cmd "${marlin_cmd}" search 'tag:logs/app AND ERROR' | grep "app.log" || (log_error "Search logs/app AND ERROR failed"; exit 1)
+    run_cmd "${marlin_cmd}" search tag:logs/app | grep "app.log" || (log_error "Search tag:logs/app failed"; exit 1)
+    grep ERROR "${DEMO_DIR}/Logs/app.log" || (log_error "Expected ERROR entry not found in log"; exit 1)
     run_cmd "${marlin_cmd}" search 'attr:status=complete' | grep "final.md" || (log_error "Search attr:status=complete failed"; exit 1)
     # Skipping --exec for automated script to avoid opening GUI
     # run_cmd "${marlin_cmd}" search 'attr:reviewed=yes' --exec 'echo {}'