docs: fix proxy chain order — contextspectre first, pastewatch as upstream

Author: ppiankov

README.md

@@ -28,10 +28,10 @@ A single long session can cost hundreds of dollars. Most of that is cache reads
 ContextSpectre is a reasoning hygiene layer for Claude Code. It operates in two modes: **post-hoc** (reads JSONL session files, diagnoses problems, cleans and repairs) and **inline** (API proxy that strips noise before it hits the API, preventing junk tokens from being billed). Works with both Claude Code CLI and Claude for Mac.
 
 ```
-Claude Code → contextspectre proxy → (optional: pastewatch) → Anthropic API
+Claude Code → contextspectre proxy (strip noise) → pastewatch (strip secrets) → Anthropic API
 ```
 
-The proxy removes thinking blocks, duplicate system reminders, and oversized content blocks from every API request. Combined with [pastewatch](https://github.com/ppiankov/pastewatch) for secret protection, it forms a two-layer control plane for agent traffic.
+The proxy removes thinking blocks, duplicate system reminders, and oversized content blocks from every API request — preventing junk tokens from being billed. Combined with [pastewatch](https://github.com/ppiankov/pastewatch) for secret protection, it forms a two-layer control plane for agent traffic.
 
 **Visibility**
 - Context meter with compaction history and turn estimates

docs/howto.md

@@ -179,7 +179,10 @@ contextspectre proxy --port 9120
 # Then set ANTHROPIC_BASE_URL=http://127.0.0.1:9120 in your shell
 
 # Chain with pastewatch for secret + noise protection
-pastewatch-cli launch --forward-proxy http://localhost:9120 -- claude
+# Order: claude → contextspectre (strip noise) → pastewatch (strip secrets) → API
+pastewatch-cli proxy                                          # Terminal 1: :8443
+contextspectre proxy --port 9120 --upstream http://localhost:8443  # Terminal 2: :9120
+ANTHROPIC_BASE_URL=http://localhost:9120 claude -r             # Terminal 3
 
 # Corporate proxy: route through your org's proxy after filtering
 contextspectre proxy --port 9120 --forward-proxy http://proxy.corp:8080

docs/workflow.md

@@ -151,7 +151,15 @@ contextspectre proxy --port 9120 --forward-proxy http://proxy.corp:8080
 
 The proxy chains transparently: Claude → contextspectre (strip noise) → corporate proxy → Anthropic API.
 
-**Two layers of protection.** With pastewatch chained, the pipeline becomes: Claude → pastewatch (strip secrets) → contextspectre (strip noise) → API. Data hygiene and context hygiene in one pipe.
+**Two layers of protection.** With [pastewatch](https://github.com/ppiankov/pastewatch) chained, contextspectre forwards to pastewatch as its upstream:
+
+```bash
+pastewatch-cli proxy                                              # Terminal 1: :8443
+contextspectre proxy --port 9120 --upstream http://localhost:8443  # Terminal 2: :9120
+ANTHROPIC_BASE_URL=http://localhost:9120 claude -r                 # Terminal 3
+```
+
+Pipeline: Claude → contextspectre (:9120, strip noise) → pastewatch (:8443, strip secrets) → Anthropic API. Data hygiene and context hygiene in one pipe.
 
 ## Recommended: continuous cleanup in a side terminal