diff --git a/apps/employees/src/handlers/auth.rs b/apps/employees/src/handlers/auth.rs
index f186832..8b736ed 100644
--- a/apps/employees/src/handlers/auth.rs
+++ b/apps/employees/src/handlers/auth.rs
@@ -14,6 +14,10 @@ use serde::{Deserialize, Serialize};
 use contracts::auth_middleware::AuthUser;
 use crate::AppState;
 
+// Retrigger: force an isolated single-service rebuild of `employees` — the
+// prior concurrent 20-service push (8a29b81) landed a digest in gitops that
+// the registry doesn't actually have (same failure mode as the earlier
+// documented incident in 512eb72/ea622a4).
 pub fn router() -> Router<AppState> {
     // Includes forgot-password / reset-password against EmployeeRepository.
     Router::new()