diff --git a/packages/config/src/keyvault.ts b/packages/config/src/keyvault.ts
index 7b592295..18db0c9f 100644
--- a/packages/config/src/keyvault.ts
+++ b/packages/config/src/keyvault.ts
@@ -98,11 +98,13 @@ async function resolveAzureKeyVaultSecrets(
 
     const failures = results.filter(r => r.status === 'rejected');
     if (failures.length > 0) {
+      // eslint-disable-next-line no-console -- Startup secret-resolution diagnostics must remain visible before app loggers exist.
       console.warn(
         `[secrets] ${failures.length}/${missing.length} secrets failed to resolve — falling back to env vars`
       );
     }
   } catch {
+    // eslint-disable-next-line no-console -- Startup secret-resolution diagnostics must remain visible before app loggers exist.
     console.warn(`[secrets] Unable to connect to Key Vault at ${vaultUrl} — using env vars`);
   }
 }