diff --git a/docs/architecture.md b/docs/architecture.md
index 6c03d31..af5724c 100644
--- a/docs/architecture.md
+++ b/docs/architecture.md
@@ -1,6 +1,11 @@
# System Architecture
-**Last updated:** 2026-04-17 (15 Docker containers + k3s SHKeeper pods + Windows DocServer VM + dev stack + crypto treasury + foreign qualification + compliance check tool)
+**Last updated:** 2026-05-07 (15 Docker containers + k3s SHKeeper pods + Windows DocServer + Postfix/OpenDKIM + bounce watcher + dev stack)
+
+See also:
+- [Business Flow Diagram](business-flow.svg)
+- [Technical Architecture Diagram](technical-architecture.svg)
+- [Order Processing Flowchart](order-flow.svg)
## Overview
diff --git a/docs/business-flow.svg b/docs/business-flow.svg
new file mode 100644
index 0000000..e9aeb8c
--- /dev/null
+++ b/docs/business-flow.svg
@@ -0,0 +1,215 @@
+
diff --git a/docs/infrastructure.md b/docs/infrastructure.md
index 70448f3..9da43f2 100644
--- a/docs/infrastructure.md
+++ b/docs/infrastructure.md
@@ -1,6 +1,6 @@
# Infrastructure
-**Last updated:** 2026-04-06
+**Last updated:** 2026-05-07
## Production Server — Linux VM
@@ -14,7 +14,7 @@
| Disk | 232 GB SSD |
| Network | Bridged, static IP |
-## Proxmox VM — Windows (DocServer) — NOT YET PROVISIONED
+## Windows DocServer VM
| Resource | Spec |
|----------|------|
@@ -22,10 +22,29 @@
| vCPU | 2 |
| RAM | 4 GB |
| Disk | 40 GB SSD |
-| Software | Microsoft Office 2021 |
-| Service | DocServer on port 5050 |
+| Software | Microsoft Office 2021 + Python 3.12 |
+| Service | docserver_worker.py (polls MinIO, converts via Word COM) |
-The Windows VM will provide high-fidelity DOCX-to-PDF conversion via Office 2021. DocServer exposes a REST API on port 5050. LibreOffice on the Linux VM serves as a fallback.
+Pixel-perfect DOCX→PDF conversion via Microsoft Word. Worker polls MinIO `to-convert/` bucket, converts via Word COM, uploads PDF to `converted/`. No HTTP server needed — MinIO is the transport. Requires RDP login after reboot (Word COM needs interactive session). LibreOffice headless is the automatic fallback.
+
+## Email Servers
+
+| IP | Hostname | PTR | Role |
+|----|----------|-----|------|
+| 207.174.124.15 | co.carrierone.com | co.carrierone.com | Carbonio — transactional email, mailboxes |
+| 207.174.124.22 | cp.carrierone.com | cp.carrierone.com | HestiaCP — DNS, Exim4 MTA, .ca domain provisioning |
+| 207.174.124.71 | perfwest.performancewest.net | perfwest.performancewest.net | Postfix + OpenDKIM — Listmonk campaign sending |
+
+All three have DKIM (2048-bit RSA), SPF (`-all` hard fail), and DMARC (`p=quarantine`).
+
+## Backup Server
+
+| Resource | Spec |
+|----------|------|
+| IP | 207.174.124.50 |
+| Type | LXC container |
+| Role | Off-site backup destination |
+| Schedule | PG 4x/day, MariaDB daily, MinIO daily, Forgejo daily |
## External Infrastructure Dependencies
diff --git a/docs/order-flow.svg b/docs/order-flow.svg
new file mode 100644
index 0000000..84cac96
--- /dev/null
+++ b/docs/order-flow.svg
@@ -0,0 +1,166 @@
+
diff --git a/docs/technical-architecture.svg b/docs/technical-architecture.svg
new file mode 100644
index 0000000..e7e0321
--- /dev/null
+++ b/docs/technical-architecture.svg
@@ -0,0 +1,208 @@
+