diff --git a/registry/generated/high-risk-data-paths.yaml b/registry/generated/high-risk-data-paths.yaml
index 673a8ab..d0200c4 100644
--- a/registry/generated/high-risk-data-paths.yaml
+++ b/registry/generated/high-risk-data-paths.yaml
@@ -10,13 +10,13 @@
 # declares it, and is null where the field set has not been established --
 # null means unknown, never 'one field'.
 
-generated_at: "2026-10-05T11:21:23Z"
+generated_at: "2026-10-05T14:12:49Z"
 source: ops-warden/registry/routing/catalog.yaml
-catalog_revision: "a53a55a9801fa27cb9f5b70fefe823d1d4bb1cde"
-catalog_revision_date: "2026-10-05T13:21:22+02:00"
+catalog_revision: "9084581461545e07d26fc29783c9fd79446e54c6"
+catalog_revision_date: "2026-10-05T16:12:48+02:00"
 catalog_dirty: false
-high_risk_lane_count: 31
-concrete_path_count: 16
+high_risk_lane_count: 32
+concrete_path_count: 17
 
 # Graded high but not a single KV address -- a routing pattern, a broker
 # grant, or a non-KV lane. Nothing here for a policy to deny.
@@ -78,6 +78,11 @@ paths:
     metadata_path: platform/metadata/workloads/forgejo/forgejo-admin
     owner_repo: railiance-platform
     fields: null   # field set not established -- unknown, not one
+  - id: inbound-library-imap-approle
+    data_path: platform/data/workloads/inbound-library/imap
+    metadata_path: platform/metadata/workloads/inbound-library/imap
+    owner_repo: ops-mason
+    fields: null   # field set not established -- unknown, not one
   - id: issue-core-ingestion-api-key
     data_path: platform/data/workloads/issue-core/issue-core/issue-core-runtime
     metadata_path: platform/metadata/workloads/issue-core/issue-core/issue-core-runtime