diff --git a/M02_REJECTION_DEMO.md b/M02_REJECTION_DEMO.md
new file mode 100644
index 0000000..5a7e670
--- /dev/null
+++ b/M02_REJECTION_DEMO.md
@@ -0,0 +1,9 @@
+# M0.2 rejection demo (DO NOT MERGE)
+
+This branch deliberately violates two CI gates:
+
+1. A commit subject that is not a Conventional Commit.
+2. An access-key pattern that gitleaks must catch.
+
+Fake key (intentionally invalid):
+AWS_SECRET_ACCESS_KEY=AKIAIOSFODNN7EXAMPLE