fix sections a bit

specification/25_application_service_api.rst

@@ -468,3 +468,15 @@ Active Application Services
   API that provides hooks into the server so that you can intercept and
   manipulate events, and/or insert virtual users & rooms into the server.
 
+Policy Servers
+==============
+.. NOTE::
+  This section is a work in progress.
+
+.. TODO-spec
+  We should mention them in the Architecture section at least: how they fit
+  into the picture.
+
+Enforcing policies
+------------------
+

specification/30_server_server_api.rst

@@ -576,17 +576,3 @@ If the query contains the optional ``field`` key, it should give the name of a
 result field. If such is present, then the result should contain only a field
 of that name, with no others present. If not, the result should contain as much
 of the user's profile as the home server has available and can make public.
-
-
-Policy Servers
-==============
-.. NOTE::
-  This section is a work in progress.
-
-.. TODO-spec
-  We should mention them in the Architecture section at least: how they fit
-  into the picture.
-
-Enforcing policies
-------------------
-

specification/31_event_signing.rst

@@ -1,5 +1,5 @@
 Signing Events
---------------
+==============
 
 Canonical JSON
 ~~~~~~~~~~~~~~