diff --git a/docs/development.md b/docs/development.md
index 873503f..9d6c087 100644
--- a/docs/development.md
+++ b/docs/development.md
@@ -64,16 +64,18 @@ The conventions that govern this layout are recorded in:
 
 A working dev machine for `apf_portal` needs:
 
-| Tool                                               | Why                                                                    | How                                                                                                |
-| -------------------------------------------------- | ---------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |
-| **WSL 2 + Debian** (Windows) or Linux/macOS native | All commands assume a POSIX shell                                      | see [setup/01](setup/01-wsl-terminal-setup.md)                                                     |
-| **Node.js 24** (latest LTS)                        | Runtime, pinned in `.nvmrc`                                            | `nvm install 24 && nvm use` (see [setup/02](setup/02-dev-web-stack.md))                            |
-| **pnpm 10+**                                       | Mandatory package manager (no npm/yarn lockfile)                       | `corepack enable && corepack prepare pnpm@latest --activate`                                       |
-| **Git ≥ 2.40**                                     | Husky 9 + signed commits eventually                                    | usually default                                                                                    |
-| **mkcert**                                         | Local HTTPS for cookie-prefix `__Host-` (ADR-0009)                     | `apt install mkcert` then `mkcert -install`                                                        |
-| **Trivy** _(optional, locally)_                    | Dep vuln scan when running `ci:scan` locally; CI uses an action        | `apt install trivy` or [trivy install docs](https://trivy.dev/)                                    |
-| **gitleaks** _(optional, locally)_                 | Same pattern; CI uses an action                                        | `apt install gitleaks` or [gitleaks install docs](https://github.com/gitleaks/gitleaks#installing) |
-| **Docker**                                         | For Postgres + Redis containers in dev (until on-prem infra ADR lands) | Docker Desktop on Windows, Docker Engine on Linux                                                  |
+| Tool                                               | Why                                                                                                 | How                                                                                                |
+| -------------------------------------------------- | --------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |
+| **WSL 2 + Debian** (Windows) or Linux/macOS native | All commands assume a POSIX shell                                                                   | see [setup/01](setup/01-wsl-terminal-setup.md)                                                     |
+| **Node.js 24** (latest LTS)                        | Runtime, pinned in `.nvmrc`                                                                         | `nvm install 24 && nvm use` (see [setup/02](setup/02-dev-web-stack.md))                            |
+| **pnpm 10+**                                       | Mandatory package manager (no npm/yarn lockfile)                                                    | `corepack enable && corepack prepare pnpm@latest --activate`                                       |
+| **Git ≥ 2.40**                                     | Husky 9 + signed commits eventually                                                                 | usually default                                                                                    |
+| **mkcert**                                         | Local HTTPS for cookie-prefix `__Host-` (ADR-0009)                                                  | `apt install mkcert` then `mkcert -install`                                                        |
+| **Trivy** _(optional, locally)_                    | Dep vuln scan when running `ci:scan` locally; CI uses an action                                     | `apt install trivy` or [trivy install docs](https://trivy.dev/)                                    |
+| **gitleaks** _(optional, locally)_                 | Same pattern; CI uses an action                                                                     | `apt install gitleaks` or [gitleaks install docs](https://github.com/gitleaks/gitleaks#installing) |
+| **Docker**                                         | For the local-dev stack (Postgres + Redis + OTel + viewers) per [`infra/local/`](../infra/local/)   | Docker Desktop on Windows, Docker Engine on Linux                                                  |
+| **`psql`** (postgresql-client)                     | Inspect the local Postgres from the host (audit roles, schemas, queries). Versions `>= 16` are fine | `apt install postgresql-client`                                                                    |
+| **`redis-cli`** (redis-tools)                      | Inspect the local Redis from the host (sessions, OBO cache when they land)                          | `apt install redis-tools`                                                                          |
 
 Work inside the WSL filesystem (`~/Works/...`), never `/mnt/c/...` — the latter has severe I/O penalties that break Nx caching.