architecture.md — full rewrite to reflect current v2 state:
- Accurate component map and pipeline stages
- Session lifecycle (server-side files, cookie signing, rotation)
- Multi-account DocuSign support flow
- Audit log record schema
- Batch job in-memory state caveat documented
- Security design table (log sanitizer, session signing, PDF checksums)
- Known limitations table (retry gaps, shard config, CI fixtures)
PRODUCT-SPEC.md — remove phantom migration_service.py and pdf_coords.py
that were in the original spec but never implemented; document where
pipeline orchestration actually lives
README.md — add Production deployment section covering:
- Reverse proxy / HTTPS requirement for OAuth callbacks
- Required env vars table
- SESSION_SECRET_KEY rotation procedure
- Adobe shard configuration (EU2 / NA1 / others via ADOBE_SIGN_BASE_URL)
- DocuSign sandbox-to-production switch
- Session store maintenance (stale file cleanup)
field-mapping.md — add Multi-Document Templates section explaining
documentId assignment, page number behaviour, and the known limitation
for multi-doc templates where page numbers are not rebased per document
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
447a89923a