v0.27.3

docs/ARCHITECTURE.md

@@ -42,7 +42,7 @@ committed document at startup; this is not one cross-memory/SQLite transaction.
 ### Rust source organization
 
 Rust modules are kept as small responsibility-oriented files. Every checked-in `.rs` file
-is limited to **500 lines**; `scripts/rust_module_contracts.py` enforces the limit across
+is limited to **500 lines**; `tools/checks/rust_module_contracts.py` enforces the limit across
 the repository. Large logical modules use a thin facade (`config.rs`, `docker.rs`,
 `server.rs`, `runtime.rs`, `balance.rs`, `prometheus.rs`, and similar) plus files in a
 matching directory. `web_server` uses the standard `web_server/mod.rs` facade with
@@ -190,7 +190,7 @@ the 0.7 scheduler and automated publication.
 same canonical vhost model used by the UI. Validated startup migration uses one
 CAS write; failure before validation completion leaves the stored JSON untouched.
 
-`acme` manages one private worker job; `scripts/acme_provider.py` adapts Certbot
+`acme` manages one private worker job; `scripts/runtime/acme_provider.py` adapts Certbot
 webroot/Cloudflare/OVH/RFC2136. Only the running HTTP-01 job's names and token files
 are exposed by the reserved challenge middleware. Provider files remain private,
 not part of SQLite or generic configuration exports. Issuance/import are separate.