diff --git a/apps/api/tests/test_gitea_capability_ci_cd_optimization_readback_api.py b/apps/api/tests/test_gitea_capability_ci_cd_optimization_readback_api.py
index 09fe07d73..203ca7fde 100644
--- a/apps/api/tests/test_gitea_capability_ci_cd_optimization_readback_api.py
+++ b/apps/api/tests/test_gitea_capability_ci_cd_optimization_readback_api.py
@@ -210,14 +210,39 @@ def test_gitea_capability_readback_rolls_up_complete_feature_surface() -> None:
         ]
         > 0
     )
-    assert (
-        len(
-            payload["workflow_source_inventory"]["secret_variable_rollups"][
-                "referenced_secret_names"
-            ]
-        )
-        == 26
-    )
+    assert set(
+        payload["workflow_source_inventory"]["secret_variable_rollups"][
+            "referenced_secret_names"
+        ]
+    ) == {
+        "ARGOCD_API_TOKEN",
+        "AWOOOI_GITEA_API_TOKEN",
+        "AWOOOI_GITEA_WEBHOOK_SECRET",
+        "AWOOOP_OPERATOR_API_KEY",
+        "CD_PUSH_TOKEN",
+        "CLAUDE_API_KEY",
+        "DATABASE_URL",
+        "GEMINI_API_KEY",
+        "HARBOR_PASSWORD",
+        "HARBOR_USERNAME",
+        "HOST112_ANSIBLE_BECOME_PASSWORD",
+        "JWT_ALGORITHM",
+        "JWT_SECRET",
+        "LANGFUSE_PUBLIC_KEY",
+        "LANGFUSE_SECRET_KEY",
+        "MIGRATION_DATABASE_URL",
+        "NEMOTRON_BOT_TOKEN",
+        "NVIDIA_API_KEY",
+        "OPENCLAW_BOT_TOKEN",
+        "OPENCLAW_TG_USER_WHITELIST",
+        "REDIS_URL",
+        "SENTRY_AUTH_TOKEN",
+        "SENTRY_DSN",
+        "SMTP_HOST",
+        "SRE_GROUP_CHAT_ID",
+        "TELEGRAM_BOT_TOKEN",
+        "WEBHOOK_HMAC_SECRET",
+    }
     feature_source_contracts = payload["workflow_source_inventory"][
         "gitea_feature_source_contracts"
     ]