diff --git a/AGENT-BOOTSTRAP.md b/AGENT-BOOTSTRAP.md
index 6534dc4..5f8d73a 100644
--- a/AGENT-BOOTSTRAP.md
+++ b/AGENT-BOOTSTRAP.md
@@ -23,8 +23,8 @@ Read these on most tasks:
 - `bible/rules/patterns/module-structure/contract.md`
 - `bible/rules/patterns/task-discipline/contract.md`
 - `bible/rules/patterns/testing-policy/contract.md`
-- `bible/rules/patterns/secret-management/contract.md`
 - `bible/rules/patterns/go-code-style/contract.md`
+- `bible/rules/patterns/git-sync-check/contract.md`
 
 ## Task Router
 
@@ -52,6 +52,10 @@ Read additional contracts by task type:
   `release-signing`
 - Identifiers, vendors, data normalization:
   `identifier-normalization`, `no-hardcoded-vendors`
+- BOM rows, component/LOT mappings:
+  `bom-decomposition`
+- Secrets, credentials, config with sensitive values:
+  `secret-management`
 - Project architecture documentation rules:
   `go-project-bible`