diff --git a/CTO.md b/CTO.md
index 2099d46..fdb488b 100644
--- a/CTO.md
+++ b/CTO.md
@@ -14,6 +14,7 @@ What the CTO publishes here for the rest of the org:
 ### ADRs
 - [ADR-0001 — Prod `authentik-credentials` source of truth](https://git.farh.net/groombook/org/wiki/ADR-0001+prod+authentik-credentials+source+of+truth.-) — platform Reflector mirror is authoritative; remove the redundant in-repo prod SealedSecret (GRO-2537 WS1).
 - [ADR 2026-06-20 — Authentik TF drift loop](https://git.farh.net/groombook/org/wiki/ADR-2026-06-20-authentik-tf-drift-loop.-) — root cause + decision for the Authentik Terraform drift loop (GRO-2458).
+- [ADR-0002 — API DB-health endpoint strategy](https://git.farh.net/groombook/org/wiki/ADR-0002+API+DB-health+endpoint+strategy.-) — K8s probes stay DB-less; a single monitoring-only `/api/readyz` owns DB/schema health; `/health/ready` (GRO-2689) is superseded (GRO-2687/2678).
 
 ### Incident reviews
 - [Incident 2026-06-20 — *.farh.net Wildcard Cert Expiry](https://git.farh.net/groombook/org/wiki/Incident+2026-06-20+farh.net+Wildcard+Cert+Expiry.-)