diff --git a/CLAUDE.md b/CLAUDE.md
index f494629..7700b81 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -137,6 +137,10 @@ Examples: `getAutotaskClient()`, `getMsgraphClient()`, `getDattoRmmClient()`,
     `disabled_at`, and an optional `disabled_reason`.
   In both cases live auth checks still run (logs surface the underlying
   state); the UI ignores the result for disabled integrations.
+  - **PAX8 is the first exception**: disabling `key='pax8'` doesn't just
+    suppress health-check display — the `pax8-daily` scheduler branch skips
+    `fullSync()` and `POST /api/pax8/sync` returns 403. Every other
+    integration's toggle today is display-only.
 
 ## Watch out for
 - A `.env` file is committed to the repo. Treat secrets as potentially real; don't