diff --git a/tenants/acme/30-apps-stubs.yaml b/tenants/acme/30-apps-stubs.yaml
index 66cd14e..36f4950 100644
--- a/tenants/acme/30-apps-stubs.yaml
+++ b/tenants/acme/30-apps-stubs.yaml
@@ -62,6 +62,7 @@ spec:
           - { path: /api/saude, pathType: Prefix, backend: { service: { name: servico-saude, port: { number: 80 } } } }
           - { path: /api/financeiro, pathType: Prefix, backend: { service: { name: servico-financeiro, port: { number: 80 } } } }
           - { path: /api/documentos, pathType: Prefix, backend: { service: { name: servico-documentos, port: { number: 80 } } } }
+          - { path: /api/administrativo, pathType: Prefix, backend: { service: { name: servico-administrativo, port: { number: 80 } } } }
           - { path: /api, pathType: Prefix, backend: { service: { name: backend, port: { number: 80 } } } }
           - { path: /, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
     - host: auth-acme.athleticmap.influxdigital.com.br
diff --git a/tenants/acme/82-servico-administrativo.yaml b/tenants/acme/82-servico-administrativo.yaml
new file mode 100644
index 0000000..6fa411f
--- /dev/null
+++ b/tenants/acme/82-servico-administrativo.yaml
@@ -0,0 +1,53 @@
+# Bounded context "administrativo" (contratos e gestao administrativa, ADR-0002).
+# Schema proprio "administrativo"; roteado em /api/administrativo no ingress do tenant.
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: servico-administrativo
+  namespace: acme-prod
+  labels: { app: servico-administrativo, athleticmap.io/contexto: administrativo }
+spec:
+  replicas: 1
+  selector: { matchLabels: { app: servico-administrativo } }
+  template:
+    metadata:
+      labels: { app: servico-administrativo, athleticmap.io/contexto: administrativo }
+    spec:
+      containers:
+        - name: servico-administrativo
+          image: docker.io/library/servico-administrativo:1.0
+          imagePullPolicy: Never
+          ports: [{ containerPort: 8083 }]
+          env:
+            - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap" }
+            - { name: SPRING_DATASOURCE_USERNAME, value: "atm" }
+            - name: SPRING_DATASOURCE_PASSWORD
+              valueFrom:
+                secretKeyRef: { name: db-credentials, key: password }
+            - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
+            - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
+            - { name: ATM_TENANT, value: "acme" }
+          resources:
+            requests: { cpu: 100m, memory: 300Mi }
+            limits: { cpu: "1", memory: 640Mi }
+          readinessProbe:
+            httpGet: { path: /api/administrativo/health, port: 8083 }
+            initialDelaySeconds: 25
+            periodSeconds: 10
+            failureThreshold: 30
+          livenessProbe:
+            httpGet: { path: /actuator/health/liveness, port: 8083 }
+            initialDelaySeconds: 60
+            periodSeconds: 20
+            failureThreshold: 6
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: servico-administrativo
+  namespace: acme-prod
+  labels: { app: servico-administrativo }
+spec:
+  selector: { app: servico-administrativo }
+  ports: [{ name: http, port: 80, targetPort: 8083 }]
diff --git a/tenants/acme/90-servico-bff.yaml b/tenants/acme/90-servico-bff.yaml
index 625836e..714231a 100644
--- a/tenants/acme/90-servico-bff.yaml
+++ b/tenants/acme/90-servico-bff.yaml
@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: servico-bff
-          image: docker.io/library/servico-bff:1.15
+          image: docker.io/library/servico-bff:1.16
           imagePullPolicy: Never
           ports: [{ containerPort: 8083 }]
           env:
@@ -32,6 +32,7 @@ spec:
             - { name: ATM_SAUDE_URL, value: "http://servico-saude" }
             - { name: ATM_FINANCEIRO_URL, value: "http://servico-financeiro" }
             - { name: ATM_DOCUMENTOS_URL, value: "http://servico-documentos" }
+            - { name: ATM_ADMINISTRATIVO_URL, value: "http://servico-administrativo" }
             - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
             - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
             - { name: ATM_TENANT, value: "acme" }
diff --git a/tenants/acme/95-frontend-spa.yaml b/tenants/acme/95-frontend-spa.yaml
index 651c929..c262c2a 100644
--- a/tenants/acme/95-frontend-spa.yaml
+++ b/tenants/acme/95-frontend-spa.yaml
@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: frontend-spa
-          image: docker.io/library/frontend-spa:1.26
+          image: docker.io/library/frontend-spa:1.27
           imagePullPolicy: Never
           ports: [{ containerPort: 80 }]
           env:
diff --git a/tenants/demo/30-apps-stubs.yaml b/tenants/demo/30-apps-stubs.yaml
index ba5a69d..842f72b 100644
--- a/tenants/demo/30-apps-stubs.yaml
+++ b/tenants/demo/30-apps-stubs.yaml
@@ -62,6 +62,7 @@ spec:
           - { path: /api/saude, pathType: Prefix, backend: { service: { name: servico-saude, port: { number: 80 } } } }
           - { path: /api/financeiro, pathType: Prefix, backend: { service: { name: servico-financeiro, port: { number: 80 } } } }
           - { path: /api/documentos, pathType: Prefix, backend: { service: { name: servico-documentos, port: { number: 80 } } } }
+          - { path: /api/administrativo, pathType: Prefix, backend: { service: { name: servico-administrativo, port: { number: 80 } } } }
           - { path: /api, pathType: Prefix, backend: { service: { name: backend, port: { number: 80 } } } }
           - { path: /, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
     - host: auth-demo.athleticmap.influxdigital.com.br
diff --git a/tenants/demo/82-servico-administrativo.yaml b/tenants/demo/82-servico-administrativo.yaml
new file mode 100644
index 0000000..7dca460
--- /dev/null
+++ b/tenants/demo/82-servico-administrativo.yaml
@@ -0,0 +1,53 @@
+# Bounded context "administrativo" (contratos e gestao administrativa, ADR-0002).
+# Schema proprio "administrativo"; roteado em /api/administrativo no ingress do tenant.
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: servico-administrativo
+  namespace: demo-prod
+  labels: { app: servico-administrativo, athleticmap.io/contexto: administrativo }
+spec:
+  replicas: 1
+  selector: { matchLabels: { app: servico-administrativo } }
+  template:
+    metadata:
+      labels: { app: servico-administrativo, athleticmap.io/contexto: administrativo }
+    spec:
+      containers:
+        - name: servico-administrativo
+          image: docker.io/library/servico-administrativo:1.0
+          imagePullPolicy: Never
+          ports: [{ containerPort: 8083 }]
+          env:
+            - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap" }
+            - { name: SPRING_DATASOURCE_USERNAME, value: "atm" }
+            - name: SPRING_DATASOURCE_PASSWORD
+              valueFrom:
+                secretKeyRef: { name: db-credentials, key: password }
+            - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
+            - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
+            - { name: ATM_TENANT, value: "demo" }
+          resources:
+            requests: { cpu: 100m, memory: 300Mi }
+            limits: { cpu: "1", memory: 640Mi }
+          readinessProbe:
+            httpGet: { path: /api/administrativo/health, port: 8083 }
+            initialDelaySeconds: 25
+            periodSeconds: 10
+            failureThreshold: 30
+          livenessProbe:
+            httpGet: { path: /actuator/health/liveness, port: 8083 }
+            initialDelaySeconds: 60
+            periodSeconds: 20
+            failureThreshold: 6
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: servico-administrativo
+  namespace: demo-prod
+  labels: { app: servico-administrativo }
+spec:
+  selector: { app: servico-administrativo }
+  ports: [{ name: http, port: 80, targetPort: 8083 }]
diff --git a/tenants/demo/90-servico-bff.yaml b/tenants/demo/90-servico-bff.yaml
index fc5731e..7eadc92 100644
--- a/tenants/demo/90-servico-bff.yaml
+++ b/tenants/demo/90-servico-bff.yaml
@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: servico-bff
-          image: docker.io/library/servico-bff:1.15
+          image: docker.io/library/servico-bff:1.16
           imagePullPolicy: Never
           ports: [{ containerPort: 8083 }]
           env:
@@ -32,6 +32,7 @@ spec:
             - { name: ATM_SAUDE_URL, value: "http://servico-saude" }
             - { name: ATM_FINANCEIRO_URL, value: "http://servico-financeiro" }
             - { name: ATM_DOCUMENTOS_URL, value: "http://servico-documentos" }
+            - { name: ATM_ADMINISTRATIVO_URL, value: "http://servico-administrativo" }
             - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
             - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
             - { name: ATM_TENANT, value: "demo" }
diff --git a/tenants/demo/95-frontend-spa.yaml b/tenants/demo/95-frontend-spa.yaml
index 2eb444d..cda0efa 100644
--- a/tenants/demo/95-frontend-spa.yaml
+++ b/tenants/demo/95-frontend-spa.yaml
@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: frontend-spa
-          image: docker.io/library/frontend-spa:1.26
+          image: docker.io/library/frontend-spa:1.27
           imagePullPolicy: Never
           ports: [{ containerPort: 80 }]
           env:
diff --git a/tenants/piloto/30-apps-stubs.yaml b/tenants/piloto/30-apps-stubs.yaml
index 21d3d60..7de6b8e 100644
--- a/tenants/piloto/30-apps-stubs.yaml
+++ b/tenants/piloto/30-apps-stubs.yaml
@@ -62,6 +62,7 @@ spec:
           - { path: /api/saude, pathType: Prefix, backend: { service: { name: servico-saude, port: { number: 80 } } } }
           - { path: /api/financeiro, pathType: Prefix, backend: { service: { name: servico-financeiro, port: { number: 80 } } } }
           - { path: /api/documentos, pathType: Prefix, backend: { service: { name: servico-documentos, port: { number: 80 } } } }
+          - { path: /api/administrativo, pathType: Prefix, backend: { service: { name: servico-administrativo, port: { number: 80 } } } }
           - { path: /api, pathType: Prefix, backend: { service: { name: backend, port: { number: 80 } } } }
           - { path: /, pathType: Prefix, backend: { service: { name: frontend-spa, port: { number: 80 } } } }
     - host: auth-piloto.athleticmap.influxdigital.com.br
diff --git a/tenants/piloto/82-servico-administrativo.yaml b/tenants/piloto/82-servico-administrativo.yaml
new file mode 100644
index 0000000..7d7845d
--- /dev/null
+++ b/tenants/piloto/82-servico-administrativo.yaml
@@ -0,0 +1,53 @@
+# Bounded context "administrativo" (contratos e gestao administrativa, ADR-0002).
+# Schema proprio "administrativo"; roteado em /api/administrativo no ingress do tenant.
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: servico-administrativo
+  namespace: piloto-prod
+  labels: { app: servico-administrativo, athleticmap.io/contexto: administrativo }
+spec:
+  replicas: 1
+  selector: { matchLabels: { app: servico-administrativo } }
+  template:
+    metadata:
+      labels: { app: servico-administrativo, athleticmap.io/contexto: administrativo }
+    spec:
+      containers:
+        - name: servico-administrativo
+          image: docker.io/library/servico-administrativo:1.0
+          imagePullPolicy: Never
+          ports: [{ containerPort: 8083 }]
+          env:
+            - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap" }
+            - { name: SPRING_DATASOURCE_USERNAME, value: "atm" }
+            - name: SPRING_DATASOURCE_PASSWORD
+              valueFrom:
+                secretKeyRef: { name: db-credentials, key: password }
+            - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
+            - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
+            - { name: ATM_TENANT, value: "piloto" }
+          resources:
+            requests: { cpu: 100m, memory: 300Mi }
+            limits: { cpu: "1", memory: 640Mi }
+          readinessProbe:
+            httpGet: { path: /api/administrativo/health, port: 8083 }
+            initialDelaySeconds: 25
+            periodSeconds: 10
+            failureThreshold: 30
+          livenessProbe:
+            httpGet: { path: /actuator/health/liveness, port: 8083 }
+            initialDelaySeconds: 60
+            periodSeconds: 20
+            failureThreshold: 6
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: servico-administrativo
+  namespace: piloto-prod
+  labels: { app: servico-administrativo }
+spec:
+  selector: { app: servico-administrativo }
+  ports: [{ name: http, port: 80, targetPort: 8083 }]
diff --git a/tenants/piloto/90-servico-bff.yaml b/tenants/piloto/90-servico-bff.yaml
index 96a1ddd..67635dc 100644
--- a/tenants/piloto/90-servico-bff.yaml
+++ b/tenants/piloto/90-servico-bff.yaml
@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: servico-bff
-          image: docker.io/library/servico-bff:1.15
+          image: docker.io/library/servico-bff:1.16
           imagePullPolicy: Never
           ports: [{ containerPort: 8083 }]
           env:
@@ -32,6 +32,7 @@ spec:
             - { name: ATM_SAUDE_URL, value: "http://servico-saude" }
             - { name: ATM_FINANCEIRO_URL, value: "http://servico-financeiro" }
             - { name: ATM_DOCUMENTOS_URL, value: "http://servico-documentos" }
+            - { name: ATM_ADMINISTRATIVO_URL, value: "http://servico-administrativo" }
             - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
             - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
             - { name: ATM_TENANT, value: "piloto" }
diff --git a/tenants/piloto/95-frontend-spa.yaml b/tenants/piloto/95-frontend-spa.yaml
index 77c8105..549c63d 100644
--- a/tenants/piloto/95-frontend-spa.yaml
+++ b/tenants/piloto/95-frontend-spa.yaml
@@ -20,7 +20,7 @@ spec:
     spec:
       containers:
         - name: frontend-spa
-          image: docker.io/library/frontend-spa:1.26
+          image: docker.io/library/frontend-spa:1.27
           imagePullPolicy: Never
           ports: [{ containerPort: 80 }]
           env: