diff --git a/README.md b/README.md
index d8c69a0..d56b39b 100644
--- a/README.md
+++ b/README.md
@@ -69,7 +69,7 @@ validation misses — a module edit that breaks the env roots composing it.
 | `modules/dns/` | the `lance.blue` hosted zone |
 | `modules/api-host/` | the EC2 host running headquarters-api behind Caddy |
 | `envs/bootstrap/` | one-shot: the state bucket and the apply role |
-| `scripts/` | deploy, logs, a shell on the api host, match operations |
+| `scripts/` | deploy, logs, a shell on the api host, match operations, health checks |
 | `docs/` | architecture, runbook |
 
 Modules take inputs and return outputs; they never read remote state, and the
diff --git a/envs/bootstrap/README.md b/envs/bootstrap/README.md
index 6cdb227..be063da 100644
--- a/envs/bootstrap/README.md
+++ b/envs/bootstrap/README.md
@@ -29,7 +29,7 @@ itself.
 
 The state bucket cannot store its own state, so bootstrap keeps its state in
 this directory, in `terraform.tfstate`. That file is committed to git. It
-contains no secrets, and committing it means a fresh clone can run `terraform
+contains no secrets, and committing it means a fresh clone can run `tofu
 plan` here without importing anything first.
 
 The apply role is defined here for a different reason: it is not allowed to