diff --git a/.forgejo/workflows/image.yaml b/.forgejo/workflows/image.yaml
index 3dc9af2..d99cd16 100644
--- a/.forgejo/workflows/image.yaml
+++ b/.forgejo/workflows/image.yaml
@@ -9,11 +9,24 @@ on:
   push:
     branches:
       - main
+    # Must list every path the Dockerfile COPYs, or a change ships to git
+    # without ever reaching the image. This previously covered only api/**,
+    # so edits to mcp_server/ and — more seriously — migrations/ produced no
+    # rebuild (CUST-WP-0067-T08).
     paths:
       - ".forgejo/workflows/image.yaml"
       - "Dockerfile"
+      - "alembic.ini"
       - "api/**"
+      - "flows/**"
+      - "mcp_server/**"
+      - "migrations/**"
+      - "policies/**"
+      - "prompts/**"
       - "pyproject.toml"
+      - "scripts/**"
+      - "task_flow_engine/**"
+      - "templates/**"
       - "uv.lock"
   workflow_dispatch: