diff --git a/cdk/package.json b/cdk/package.json
index 38dc196be..e78013f65 100644
--- a/cdk/package.json
+++ b/cdk/package.json
@@ -49,7 +49,6 @@
     "@types/jest": "^30.0.0",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^26",
-    "@types/pdf-parse": "^1.1.5",
     "@types/ws": "^8.18.1",
     "@typescript-eslint/eslint-plugin": "^8",
     "@typescript-eslint/parser": "^8",
diff --git a/knip-baseline.json b/knip-baseline.json
index 5349b3e48..4a0aca992 100644
--- a/knip-baseline.json
+++ b/knip-baseline.json
@@ -1,4 +1,4 @@
 {
-  "count": 78,
-  "comment": "Dead-code ratchet baseline for issue #282 (cairn MVG gate #6). This is the knip issue count at the time the gate was introduced — pre-existing unused exports/types that are out of scope to remove in the gate PR. The ratchet (scripts/check-deadcode-ratchet.mjs) fails the build only if the count rises above this number. When dead code is removed and the count drops, lower this value in the same PR to lock in the gain. Per-category false positives belong in knip.json, not here."
+  "count": 85,
+  "comment": "Dead-code ratchet baseline for issue #282 (cairn MVG gate #6). The ratchet (scripts/check-deadcode-ratchet.mjs) reads only `count` and fails the build only if the current knip issue count rises above it; when dead code is removed and the count drops, lower this value in the same PR to lock in the gain. Suppress false positives in knip.json — via ignore/ignoreDependencies, or by declaring the workspace so its entry points are reachable — never absorb them into this baseline. The remaining 85 are pre-existing unused exports and types, tracked in #682."
 }
diff --git a/knip.json b/knip.json
index 77cbfed13..1b92ebd7b 100644
--- a/knip.json
+++ b/knip.json
@@ -20,7 +20,11 @@
     "docs": {
       "entry": ["astro.config.mjs", "src/content.config.ts", "src/components/**/*.astro"],
       "project": ["src/**/*.{astro,ts,tsx}"],
-      "ignoreDependencies": ["@astrojs/check", "remark-gfm", "@pagefind/default-ui", "jest"]
+      "ignoreDependencies": ["@astrojs/check", "markdown-link-check", "remark-gfm", "@pagefind/default-ui", "jest"]
+    },
+    "integrations/jira-forge-app": {
+      "entry": ["src/index.js!", "test/**/*.test.js"],
+      "project": ["src/**/*.js!", "test/**/*.js"]
     }
   }
 }
diff --git a/package.json b/package.json
index 2d97ded4c..b8d6f8008 100644
--- a/package.json
+++ b/package.json
@@ -18,7 +18,6 @@
     "knip": "knip"
   },
   "devDependencies": {
-    "@astrojs/check": "^0.9.9",
     "knip": "6.23.0"
   },
   "resolutions": {
diff --git a/scripts/check-deadcode-ratchet.mjs b/scripts/check-deadcode-ratchet.mjs
index d7430f9df..058133532 100644
--- a/scripts/check-deadcode-ratchet.mjs
+++ b/scripts/check-deadcode-ratchet.mjs
@@ -49,7 +49,7 @@ const baselinePath = join(repoRoot, 'knip-baseline.json');
 // array-of-arrays (one inner array per duplicate group), so its `.length`
 // counts groups, which is the unit we ratchet on.
 //
-// This is the complete set of countable keys for the installed knip (6.20.0,
+// This is the complete set of countable keys for the installed knip (6.23.0,
 // pinned exactly). There is no `nsExports`/`nsTypes`/`classMembers` in this
 // schema — namespace/enum members surface as `namespaceMembers`/`enumMembers`.
 // If knip is bumped, re-derive this list from its JSON (the countIssues guard
diff --git a/yarn.lock b/yarn.lock
index f87bb4e67..a87bce25f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3006,13 +3006,6 @@
   dependencies:
     undici-types "~7.18.0"
 
-"@types/pdf-parse@^1.1.5":
-  version "1.1.5"
-  resolved "https://registry.yarnpkg.com/@types/pdf-parse/-/pdf-parse-1.1.5.tgz#a0959022604457169177622b512ed03b975f10e2"
-  integrity sha512-kBfrSXsloMnUJOKi25s3+hRmkycHfLK6A09eRGqF/N8BkQoPUmaCr+q8Cli5FnfohEz/rsv82zAiPz/LXtOGhA==
-  dependencies:
-    "@types/node" "*"
-
 "@types/sax@^1.2.1":
   version "1.2.7"
   resolved "https://registry.yarnpkg.com/@types/sax/-/sax-1.2.7.tgz#ba5fe7df9aa9c89b6dff7688a19023dd2963091d"