diff --git a/argocd/railiance01/applications/secret-annotation-guard.application.yaml b/argocd/railiance01/applications/secret-annotation-guard.application.yaml
new file mode 100644
index 0000000..8db40c3
--- /dev/null
+++ b/argocd/railiance01/applications/secret-annotation-guard.application.yaml
@@ -0,0 +1,22 @@
+# CUST-WP-0073-T03; supervised manual sync, no automatic pruning.
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: secret-annotation-guard
+  namespace: argocd
+  labels:
+    app.kubernetes.io/part-of: railiance-gitops
+    railiance-platform/component: secret-custody
+spec:
+  project: railiance-platform-addons
+  source:
+    repoURL: https://forgejo.coulomb.social/coulomb/railiance-platform.git
+    targetRevision: 800cbfa870661d47bee34c747f04f6145875adf1
+    path: argocd/platform-addons/secret-annotation-guard
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
+  syncPolicy:
+    syncOptions:
+      - ApplyOutOfSyncOnly=true
+      - PruneLast=true