diff --git a/.gitleaksignore b/.gitleaksignore
new file mode 100644
index 0000000..7abd9f6
--- /dev/null
+++ b/.gitleaksignore
@@ -0,0 +1,5 @@
+# Approved historical findings (exact fingerprints only, no patterns): github-pat matches in a logging redaction test and a planning document,
+# committed 2026-04-22, before the 2026-11-01 cutover. Any new or different finding is still reported.
+23917e58f261ed49d26aac9424f50bd8803bda13:packages/Logging/Tests/JarvisLoggingTests/RedactTests.swift:github-pat:33
+4335167ebf669ab43d759b86969c543400eb456d:.planning/phases/01-foundations/01-02-keychain-config-logging-PLAN.md:github-pat:1015
+4335167ebf669ab43d759b86969c543400eb456d:.planning/phases/01-foundations/01-02-keychain-config-logging-PLAN.md:github-pat:1372