diff --git a/cameleer-server-app/src/main/resources/db/migration/V3__deployment_config_snapshot.sql b/cameleer-server-app/src/main/resources/db/migration/V3__deployment_config_snapshot.sql
new file mode 100644
index 00000000..8ffc941d
--- /dev/null
+++ b/cameleer-server-app/src/main/resources/db/migration/V3__deployment_config_snapshot.sql
@@ -0,0 +1,7 @@
+-- V3: per-deployment config snapshot for "last known good" + dirty detection
+-- Captures {jarVersionId, agentConfig, containerConfig} at the moment a
+-- deployment transitions to RUNNING. Historical rows are NULL; dirty detection
+-- treats NULL as "everything dirty" and the next successful Redeploy populates it.
+
+ALTER TABLE deployments
+    ADD COLUMN deployed_config_snapshot JSONB;