diff --git a/src/ZB.MOM.WW.ScadaBridge.Host/Program.cs b/src/ZB.MOM.WW.ScadaBridge.Host/Program.cs
index bd73e44f..a5dd3e30 100644
--- a/src/ZB.MOM.WW.ScadaBridge.Host/Program.cs
+++ b/src/ZB.MOM.WW.ScadaBridge.Host/Program.cs
@@ -521,6 +521,9 @@ try
         var configDbConnectionString = configuration["ScadaBridge:Database:ConfigurationDb"]
             ?? throw new InvalidOperationException("ScadaBridge:Database:ConfigurationDb connection string is required for Central role.");
         builder.Services.AddConfigurationDatabase(configDbConnectionString);
+        builder.Services.AddOptions<ZB.MOM.WW.ScadaBridge.ConfigurationDatabase.Maintenance.ConfigAuditOptions>()
+            .Bind(configuration.GetSection(ZB.MOM.WW.ScadaBridge.ConfigurationDatabase.Maintenance.ConfigAuditOptions.SectionName))
+            .ValidateOnStart();
 
         // Health checks for readiness gating — shared ZB.MOM.WW.Health probes.
         // Ready tier (/health/ready): database + akka-cluster + required-singletons.