diff --git a/tests/tags.yml b/tests/tags.yml
index 2937beb..5811bc7 100644
--- a/tests/tags.yml
+++ b/tests/tags.yml
@@ -20,6 +20,7 @@ concerns:
   - config       # render templated config/compose files to disk — no restart
   - deploy       # bring services up / restart (compose up -d)
   - proxy        # reverse-proxy + TLS registration (Caddy routes, Authentik)
+  - mesh         # NetBird agent enrollment (ADR-016)
 
 # Ansible built-in special tags. Narrow use only:
 #   always — cheap preflight assertions (run regardless of --tags)