diff --git a/CTO.md b/CTO.md
index 7de2a40..4f99378 100644
--- a/CTO.md
+++ b/CTO.md
@@ -11,4 +11,8 @@ What the CTO publishes here for the rest of the org:
 
 ## Index
 
-_No pages yet — add ADRs and incident reviews below as they are written._
+### ADRs
+- [ADR-0001 — Prod `authentik-credentials` source of truth](ADR-0001-prod-authentik-credentials-source-of-truth) — platform Reflector mirror is authoritative; remove the redundant in-repo prod SealedSecret (GRO-2537 WS1).
+
+### Incident reviews
+_None yet._