diff --git a/.secrets.baseline b/.secrets.baseline
index 9ce27214..b5eeff6b 100644
--- a/.secrets.baseline
+++ b/.secrets.baseline
@@ -1,6 +1,52 @@
 {
   "version": "1.5.0",
   "results": {
+    "project-docs/V2-ai-platform-embedding-pgvector-2026-06-22.md": [
+      {
+        "type": "Basic Auth Credentials",
+        "filename": "project-docs/V2-ai-platform-embedding-pgvector-2026-06-22.md",
+        "hashed_secret": "141a92417f71895e56c4a5da05f3e98fc78e2220",
+        "line_number": 64,
+        "is_secret": false,
+        "audit_reason": "Documented local-only PostgreSQL credentials."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "project-docs/V2-ai-platform-embedding-pgvector-2026-06-22.md",
+        "hashed_secret": "8031f88f0b06be1613e58bda29c3e949459dc528",
+        "line_number": 67,
+        "is_secret": false,
+        "audit_reason": "Explicit embedding-key placeholder in setup documentation."
+      }
+    ],
+    "project-docs/V2-contract-api-persistent-repository-2026-06-23.md": [
+      {
+        "type": "Basic Auth Credentials",
+        "filename": "project-docs/V2-contract-api-persistent-repository-2026-06-23.md",
+        "hashed_secret": "d61ceadbdb0081cce7a2c1f65558bd2243ecc161",
+        "line_number": 25,
+        "is_secret": false,
+        "audit_reason": "Documented local-only PostgreSQL credentials."
+      }
+    ],
+    "project-docs/V2-database-engineering-baseline-2026-06-24.md": [
+      {
+        "type": "Basic Auth Credentials",
+        "filename": "project-docs/V2-database-engineering-baseline-2026-06-24.md",
+        "hashed_secret": "964a0c3a014c640b82d5ab59c4665a323d20a880",
+        "line_number": 127,
+        "is_secret": false,
+        "audit_reason": "Documented local compose credentials."
+      },
+      {
+        "type": "Basic Auth Credentials",
+        "filename": "project-docs/V2-database-engineering-baseline-2026-06-24.md",
+        "hashed_secret": "7205a0abf00d1daec13c63ece029057c974795a9",
+        "line_number": 139,
+        "is_secret": false,
+        "audit_reason": "Production example uses explicit CHANGE_ME placeholders."
+      }
+    ],
     "project-docs/V2-phase3-ai-platform-request-tenant-context-2026-07-02.md": [
       {
         "type": "Secret Keyword",
@@ -47,6 +93,32 @@
         "audit_reason": "Documented local-only PostgreSQL credentials."
       }
     ],
+    "yuqei-ai-platform/services/ai-platform-api/README.md": [
+      {
+        "type": "Basic Auth Credentials",
+        "filename": "yuqei-ai-platform/services/ai-platform-api/README.md",
+        "hashed_secret": "141a92417f71895e56c4a5da05f3e98fc78e2220",
+        "line_number": 17,
+        "is_secret": false,
+        "audit_reason": "Documented local-only PostgreSQL credentials."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-ai-platform/services/ai-platform-api/README.md",
+        "hashed_secret": "11fa7c37d697f30e6aee828b4426a10f83ab2380",
+        "line_number": 49,
+        "is_secret": false,
+        "audit_reason": "Explicit provider-key placeholder in setup documentation."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-ai-platform/services/ai-platform-api/README.md",
+        "hashed_secret": "1488a3ad85e01f333b3220769033ea787a21b793",
+        "line_number": 65,
+        "is_secret": false,
+        "audit_reason": "Explicit embedding-key placeholder in setup documentation."
+      }
+    ],
     "yuqei-ai-platform/services/ai-platform-api/alembic.ini": [
       {
         "type": "Basic Auth Credentials",
@@ -87,6 +159,50 @@
         "audit_reason": "Synthetic object-storage key used by a mocked unit test."
       }
     ],
+    "yuqei-ai-platform/services/ai-platform-api/tests/test_platform_data.py": [
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_platform_data.py",
+        "hashed_secret": "80ebbbd0957cbf91ab4f3f39ae05b547b7770116",
+        "line_number": 96,
+        "is_secret": false,
+        "audit_reason": "Synthetic environment secret reference used by a unit test."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_platform_data.py",
+        "hashed_secret": "944e39e8ed4859e0901b7ca0830067a935c1587d",
+        "line_number": 165,
+        "is_secret": false,
+        "audit_reason": "Synthetic OCR secret reference used by a unit test."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_platform_data.py",
+        "hashed_secret": "f63fad0d3c81d12c8ce8b5907fa29f1d5b4fc2f1",
+        "line_number": 306,
+        "is_secret": false,
+        "audit_reason": "Synthetic OCR key asserted by a unit test."
+      }
+    ],
+    "yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py": [
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py",
+        "hashed_secret": "3acfb2c2b433c0ea7ff107e33df91b18e52f960f",
+        "line_number": 55,
+        "is_secret": false,
+        "audit_reason": "Synthetic provider key used by a mocked unit test."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-ai-platform/services/ai-platform-api/tests/test_provider_flow.py",
+        "hashed_secret": "dfd7a37d1dc759fc860644d608aa5d8ad9b53c96",
+        "line_number": 201,
+        "is_secret": false,
+        "audit_reason": "Synthetic environment secret reference used by a unit test."
+      }
+    ],
     "yuqei-ai-platform/services/worker/src/yuqei_worker/config.py": [
       {
         "type": "Basic Auth Credentials",
@@ -97,6 +213,16 @@
         "audit_reason": "Documented local-only PostgreSQL default."
       }
     ],
+    "yuqei-ai-platform/services/worker/tests/test_health.py": [
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-ai-platform/services/worker/tests/test_health.py",
+        "hashed_secret": "3acfb2c2b433c0ea7ff107e33df91b18e52f960f",
+        "line_number": 30,
+        "is_secret": false,
+        "audit_reason": "Synthetic provider key used by a worker health test."
+      }
+    ],
     "yuqei-contract-platform/services/contract-api/.env.example": [
       {
         "type": "Basic Auth Credentials",
@@ -117,6 +243,76 @@
         "audit_reason": "Documented local-only PostgreSQL credentials."
       }
     ],
+    "yuqei-contract-platform/services/contract-api/tests/test_contract_workflow.py": [
+      {
+        "type": "Base64 High Entropy String",
+        "filename": "yuqei-contract-platform/services/contract-api/tests/test_contract_workflow.py",
+        "hashed_secret": "9ea8584df2c99619e1919b4d0218b32f8f9fd66a",
+        "line_number": 808,
+        "is_secret": false,
+        "audit_reason": "Contract template identifier in a test request path."
+      }
+    ],
+    "yuqei-contract-platform/services/contract-api/tests/test_health.py": [
+      {
+        "type": "Basic Auth Credentials",
+        "filename": "yuqei-contract-platform/services/contract-api/tests/test_health.py",
+        "hashed_secret": "d61ceadbdb0081cce7a2c1f65558bd2243ecc161",
+        "line_number": 74,
+        "is_secret": false,
+        "audit_reason": "Synthetic local PostgreSQL credentials used by a unit test."
+      }
+    ],
+    "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py": [
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
+        "hashed_secret": "6358449ebfe8a3fd4cf289c411b76cc53f415baa",
+        "line_number": 102,
+        "is_secret": false,
+        "audit_reason": "Synthetic tenant-admin password used by an identity test."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
+        "hashed_secret": "6809ffccad03b80fa1fbc32c17e7e054805ec30b",
+        "line_number": 139,
+        "is_secret": false,
+        "audit_reason": "Explicit wrong-password fixture used by a negative test."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
+        "hashed_secret": "2585823c3e56d65632eff0c1eb7f8fffa0736cb3",
+        "line_number": 188,
+        "is_secret": false,
+        "audit_reason": "Synthetic invite password used by an identity test."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
+        "hashed_secret": "d26b0b74aaf44561a94d607e9d73e4dc6b95fe3d",
+        "line_number": 241,
+        "is_secret": false,
+        "audit_reason": "Synthetic tenant-owner password used by an identity test."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
+        "hashed_secret": "42f6c37f356183f42a67d9e0ae515bb51d7590cf",
+        "line_number": 280,
+        "is_secret": false,
+        "audit_reason": "Synthetic old-password fixture used by a reset test."
+      },
+      {
+        "type": "Secret Keyword",
+        "filename": "yuqei-contract-platform/services/contract-api/tests/test_identity_management.py",
+        "hashed_secret": "a55a3986a699ba4d2b29b2057811322bf076abd0",
+        "line_number": 299,
+        "is_secret": false,
+        "audit_reason": "Synthetic new-password fixture used by a reset test."
+      }
+    ],
     "yuqei-infra/compose/.env.example": [
       {
         "type": "Basic Auth Credentials",