diff --git a/.ci/gitea-qualification.md b/.ci/gitea-qualification.md
new file mode 100644
index 0000000..78a5701
--- /dev/null
+++ b/.ci/gitea-qualification.md
@@ -0,0 +1,3 @@
+Central Java verification, tests and secret scan are supplied by the organization-scoped workflow.
+
+Integration suites require the declared isolated rootless Docker pool.
diff --git a/.gitleaksignore b/.gitleaksignore
new file mode 100644
index 0000000..351f117
--- /dev/null
+++ b/.gitleaksignore
@@ -0,0 +1,4 @@
+
+# Reviewed historical unit-test redaction canaries and isolated container fixture credentials.
+# Exact commit/file/rule/line fingerprints only; future findings remain blocking.
+3b117cfff49405cd4d1dea5c2572a4330852cd75:src/test/java/com/kingsrook/qbits/authentik/health/AuthentikHealthChecksTest.java:generic-api-key:58