diff --git a/.ci/gitea-qualification.md b/.ci/gitea-qualification.md
new file mode 100644
index 0000000..78a5701
--- /dev/null
+++ b/.ci/gitea-qualification.md
@@ -0,0 +1,3 @@
+Central Java verification, tests and secret scan are supplied by the organization-scoped workflow.
+
+Integration suites require the declared isolated rootless Docker pool.
diff --git a/.gitleaksignore b/.gitleaksignore
new file mode 100644
index 0000000..55ba8ef
--- /dev/null
+++ b/.gitleaksignore
@@ -0,0 +1,6 @@
+
+# Reviewed historical unit-test redaction canaries and isolated container fixture credentials.
+# Exact commit/file/rule/line fingerprints only; future findings remain blocking.
+63c441e6cd0a1785199b97b424a0a28d77aac3ff:src/test/java/com/kingsrook/qbits/objectstorage/health/ObjectStorageConnectionChecksTest.java:generic-api-key:78
+18ffbf1e75c588a45671a549500f971b36512b11:src/test/java/com/kingsrook/qbits/objectstorage/conformance/Targets.java:generic-api-key:162
+18ffbf1e75c588a45671a549500f971b36512b11:src/test/java/com/kingsrook/qbits/objectstorage/conformance/Targets.java:generic-api-key:180