diff --git a/README.md b/README.md
index ee411d3133c57b03fe0a3f0e9d53df3681770b5b..17141be84d6261c8aeedeae6ae5644a6d940f204 100644
--- a/README.md
+++ b/README.md
@@ -45,8 +45,12 @@ - `gitx/` — bare-repo access over go-git: refs, ref-to-ref diffs, single-commit
   diffs, and commit logs, all bounded by context timeouts and output-size caps.
 - `authz/` — cookie→identity and the git.sr.ht GraphQL authorizer with a short
   TTL cache.
-- `web/` — chi router, handlers, Go templates, embedded static assets. The page
-  chrome is not here: it is `sr-ht-ecore/chrome`, wired up in `web/server.go`.
+- `web/` — chi router, handlers, Go templates, embedded static assets. Most of
+  the machinery around them is not here but in [sr-ht-ecore], wired up in
+  `web/server.go`: `chrome` for the page frame, `pages` for template discovery
+  and the shared error page, `assets` for the hashed artefacts and their cache
+  policy, `csrf` and `middleware` for the router's guards. What is left is this
+  service's own: the routes, the handlers, and the templates they render.
 - `frontend/` + `scss/` — build-time TypeScript diff bundle and the SCSS entry.
 - `cmd/comparesrht/` — the daemon entry point and startup validation.
 - `contrib/` — nginx server block, systemd unit, and a dev GraphQL stub.