diff --git a/komodo/resources.toml b/komodo/resources.toml
index 54bac16..82ab4c1 100644
--- a/komodo/resources.toml
+++ b/komodo/resources.toml
@@ -30,6 +30,42 @@
 # new [[stack]] block per site (unique name, its own per-booth secret refs).
 ##############################################################################
 
+##############################################################################
+# park-lab — the LAB bench box (hardware/dev testing, no real traffic). Chases
+# the dev tier: compose files from `dev`, MOVING image tag `dev` (labs may
+# float; real booths pin). Secrets are its own park_lab_* refs — per-box blast
+# radius, never shared with a real booth even in the lab.
+##############################################################################
+
+[[stack]]
+name = "park-lab"
+[stack.config]
+server = "park-test"
+git_provider = "git.infra.msai.al"
+git_account = "komodo"
+repo = "mca/parking_solution"
+branch = "dev"
+file_paths = [
+  "docker-compose.yml",
+  "docker-compose.prod.yml"
+]
+registry_provider = "git.infra.msai.al"
+registry_account = "komodo"
+environment = """
+REGISTRY=git.infra.msai.al/mca/parking_solution
+# Lab tier: the MOVING dev tag — redeploy pulls the latest dev build. Pin to a
+# dev-<sha> only when reproducing a specific state.
+TAG=dev
+COOKIE_SECURE=0
+VISION_ENABLED=1
+WS_ALLOWED_ORIGINS=
+JWT_SECRET=[[park_lab_jwt_secret]]
+EVENT_SIGNING_KEY=[[park_lab_event_signing_key]]
+BACKUP_KEY=[[park_lab_backup_key]]
+"""
+
+##############################################################################
+
 [[stack]]
 name = "park-buzi"
 [stack.config]