diff --git a/apps/web/src/lib/capability-registry/surfaces.ts b/apps/web/src/lib/capability-registry/surfaces.ts
index fb771844..67f9ded2 100644
--- a/apps/web/src/lib/capability-registry/surfaces.ts
+++ b/apps/web/src/lib/capability-registry/surfaces.ts
@@ -62,6 +62,8 @@ export const API_PENDING_BINDING: Readonly<Record<string, string>> = {
   "/api/auth/[...nextauth]":
     "sign-in transport — a capability gate here would make a tenant unable to authenticate its way to being told why",
   "/api/health": "load-balancer health check — has no tenant and no session",
+  "/api/integrations/slack/events":
+    "inbound webhook — Slack is the caller and the signature over the raw bytes is the authentication, so there is no session; and one delivery resolves through teamId to every institution that connected that workspace, so there is no single tenant to ask about",
   "/api/jobs/reminders": "scheduled job — runs for every institution at once, with no tenant asking",
   "/api/notifications": "per-user shell, like /notifications — not per-tenant-capability",
   "/api/org-image/[orgId]": "image bytes for the club spine",