diff --git a/admin-frontend b/admin-frontend
new file mode 160000
index 0000000..dd62bdd
--- /dev/null
+++ b/admin-frontend
@@ -0,0 +1 @@
+Subproject commit dd62bddc1f4e2125d79d3de5e2a63a68898a0e27
diff --git a/backend b/backend
index e034cd4..f436861 160000
--- a/backend
+++ b/backend
@@ -1 +1 @@
-Subproject commit e034cd47fefeb74cb71a71966f95fc62975637f0
+Subproject commit f436861921fb176de411f701e4e30e55a3049b5e
diff --git a/compose.yml b/compose.yml
index aa768ae..81e617d 100644
--- a/compose.yml
+++ b/compose.yml
@@ -208,6 +208,9 @@ services:
       DB_HOST: postgres
       CDP_UPLOADER_URL: http://cdp-uploader:7337
       HTTP_PROXY: http://squid:3128
+      # Service-to-service API keys (local dev only; real values come from CDP secrets)
+      BACKEND_API_KEY: local-dev-backend-key
+      IMPACT_ASSESSOR_API_KEY: local-dev-impact-assessor-key
     volumes:
       - ./backend/src:/home/node/src
       - ./backend/package.json:/home/node/package.json
@@ -298,6 +301,9 @@ services:
       # Browser-facing upload URL — must be reachable from the user's browser, not from within Docker
       CDP_UPLOADER_URL: http://localhost:7337
       HTTP_PROXY: http://squid:3128
+      # Service-to-service API keys (local dev only; real values come from CDP secrets)
+      BACKEND_API_KEY: local-dev-backend-key
+      IMPACT_ASSESSOR_API_KEY: local-dev-impact-assessor-key
     volumes:
       - ./frontend/src:/home/node/src
       - ./frontend/package.json:/home/node/package.json
@@ -349,6 +355,8 @@ services:
       SESSION_COOKIE_SECURE: 'false'
       NRF_BACKEND_API_URL: http://backend:3001
       HTTP_PROXY: http://squid:3128
+      # Service-to-service API key (local dev only; real values come from CDP secrets)
+      BACKEND_API_KEY: local-dev-backend-key
     volumes:
       - ./admin-frontend/src:/home/node/src
       - ./admin-frontend/package.json:/home/node/package.json
@@ -436,6 +444,9 @@ services:
       API_TESTING_ENABLED: 'true'
       BACKEND_BASE_URL: http://backend:3001
       HTTP_PROXY: http://squid:3128
+      # Service-to-service API keys (local dev only; real values come from CDP secrets)
+      IMPACT_ASSESSOR_API_KEY: local-dev-impact-assessor-key
+      BACKEND_API_KEY: local-dev-backend-key
     volumes:
       - ./impact-assessor/app:/home/nonroot/app
     develop:
diff --git a/frontend b/frontend
index bf3d24b..92df94d 160000
--- a/frontend
+++ b/frontend
@@ -1 +1 @@
-Subproject commit bf3d24b346e5f9d3065713a3ac1a09b6d29edb99
+Subproject commit 92df94d69cfdd80b13807d5c73d2c2da943c1678
diff --git a/impact-assessor b/impact-assessor
index 5f33f62..548934d 160000
--- a/impact-assessor
+++ b/impact-assessor
@@ -1 +1 @@
-Subproject commit 5f33f62fcbc2b683edb21ec8b9625e20b61d88cf
+Subproject commit 548934dd20174e7ee0bfcbbea22defc63f1fc761
diff --git a/journey-tests b/journey-tests
index fd7d860..4d056cf 160000
--- a/journey-tests
+++ b/journey-tests
@@ -1 +1 @@
-Subproject commit fd7d8600f99b48c08be8457a15e3c6518baf9e7c
+Subproject commit 4d056cf905fbce9235f0bbf6a71b8a84d18e3a4e