backend/CLAUDE.md

@@ -103,7 +103,7 @@ public class MyEntity {
 
 → See [CONTRIBUTING.md §Error handling](../CONTRIBUTING.md#error-handling)
 
-**LLM reminder:** use `DomainException.notFound/forbidden/conflict/internal()` — never throw raw exceptions from service methods. When adding a new `ErrorCode`: add to `ErrorCode.java`, mirror in `frontend/src/lib/shared/errors.ts`, add i18n keys in `messages/{de,en,es}.json`.
+**LLM reminder:** use `DomainException.notFound/forbidden/conflict/internal()` — never throw raw exceptions from service methods. For simple controller validation (not domain logic), `ResponseStatusException` is acceptable: `throw new ResponseStatusException(HttpStatus.BAD_REQUEST, "…")`. When adding a new `ErrorCode`: add to `ErrorCode.java`, mirror in `frontend/src/lib/shared/errors.ts`, add i18n keys in `messages/{de,en,es}.json`.
 
 ## Security / Permissions
 

docs/README.md

@@ -14,8 +14,7 @@ docs/
 ├── DEPLOYMENT.md            # Day-1 checklist and operational reference (DOC-5)
 ├── GLOSSARY.md              # Domain terminology (DOC-3)
 ├── security-guide.md        # Security policies and hardening guide
-├── STYLEGUIDE.md            # Coding and design style guide
-└── infrastructure/          # Production compose, CI config, S3 migration
+└── STYLEGUIDE.md            # Coding and design style guide
 ```
 
 ## ADR (`adr/`)

ocr-service/CLAUDE.md

@@ -4,4 +4,4 @@
 
 **LLM reminder:** the OCR service is a **single-node container** — training reloads the model in-process, so multiple replicas cause model-state divergence (see ADR-001). All job tracking and business logic stay in Spring Boot; the Python service is stateless OCR only.
 
-`ALLOWED_PDF_HOSTS` must never be set to `*` — that opens SSRF. The default (`minio,localhost,127.0.0.1`) is correct for dev.
+**LLM reminder:** `ALLOWED_PDF_HOSTS` must never be set to `*` — that opens SSRF. The default (`minio,localhost,127.0.0.1`) is correct for dev.