diff --git a/api/requirements.txt b/api/requirements.txt
index 7892c91..db4609a 100644
--- a/api/requirements.txt
+++ b/api/requirements.txt
@@ -7,5 +7,5 @@ passlib[bcrypt]==1.7.4
 jsonschema==4.26.0
 pyyaml==6.0.3
 jinja2==3.1.6
-python-multipart==0.0.12
+python-multipart==0.0.32
 xmltodict==1.0.4
diff --git a/project/TICKETS.md b/project/TICKETS.md
index ad1dc14..a12e6b9 100644
--- a/project/TICKETS.md
+++ b/project/TICKETS.md
@@ -8,4 +8,5 @@
 | **ticket-003** | [`README.md`](./ticket-003/README.md) | - | - | - | - | - |
 | **ticket-004** | [`README.md`](./ticket-004/README.md) | - | - | - | - | - |
 | **ticket-621** | [`README.md`](./ticket-621/README.md) | - | - | - | - | - |
+| **ticket-622** | [`README.md`](./ticket-622/README.md) | - | - | - | - | - |
 <!-- AUTO:TICKET_INDEX:END -->
diff --git a/project/ticket-622/README.md b/project/ticket-622/README.md
new file mode 100644
index 0000000..3bda16a
--- /dev/null
+++ b/project/ticket-622/README.md
@@ -0,0 +1,21 @@
+# Ticket 622: Shared lockfile dependency maintenance
+
+- **ID**: ticket-622
+- **Owner**: agent:claude
+- **Status**: IN_PROGRESS
+- **Workflow state**: EDIT
+- **Created**: 2026-10-23
+
+## Goal and scope
+
+Own the automated shared-lockfile dependency updates (api/requirements.txt)
+through the integration workstream.
+
+## Acceptance criteria
+
+- [ ] AC-01: the automated dependency update resolves to this ticket and
+  passes the governance gate.
+
+## Tracking boundary
+
+Shared lockfiles only; no runtime code changes.
diff --git a/project/ticket-622/intent.json b/project/ticket-622/intent.json
new file mode 100644
index 0000000..e7dc162
--- /dev/null
+++ b/project/ticket-622/intent.json
@@ -0,0 +1,71 @@
+{
+  "schema": "new-project.intent/v3",
+  "ticket": "ticket-622",
+  "summary": "Shared lockfile dependency maintenance",
+  "workstream": "interfaces",
+  "classification": {
+    "kind": "SERVICE",
+    "priority": "P2",
+    "origin": "health"
+  },
+  "allowedPaths": [
+    "project/ticket-622/**",
+    "TODO.md",
+    "project/TICKETS.md",
+    "api/requirements.txt"
+  ],
+  "forbiddenPaths": [
+    "project/ticket-*/user-*.md"
+  ],
+  "stacks": [],
+  "dependsOn": [],
+  "conflictsWith": [],
+  "integrationTicket": null,
+  "delivery": {
+    "acceptedBaseSha": "e0c13a0361b6bb433b181cc4b40c4fdbb7374499",
+    "targetBranch": "main",
+    "outcome": "Automated shared-lockfile dependency updates carried through the integration workstream.",
+    "nonGoals": [
+      "runtime code changes"
+    ],
+    "complexity": "L",
+    "estimatedMinutes": 60,
+    "budgets": {
+      "maxImplementationFiles": 15,
+      "maxAffectedComponents": 5,
+      "maxPublicInterfaceChanges": 3,
+      "maxRuntimeDependencies": 3
+    },
+    "architecture": {
+      "status": "accepted",
+      "decision": "No architecture change; dependency lockfile refresh only.",
+      "components": [
+        {
+          "name": "dependencies",
+          "paths": [
+            "api/requirements.txt"
+          ]
+        }
+      ],
+      "responsibilityChanges": false,
+      "interfaceChanges": [],
+      "dataChanges": [],
+      "ui": {
+        "impact": "none",
+        "states": [],
+        "evidence": []
+      },
+      "rollback": "git revert the dependency bump commit"
+    },
+    "runtimeDependencies": [],
+    "validation": [
+      {
+        "criterion": "AC-01",
+        "commands": [
+          "project/governance-check.sh"
+        ],
+        "evidence": "governance gate GOV-PASS on the PR diff"
+      }
+    ]
+  }
+}