diff --git a/scripts/smoke-test.sh b/scripts/smoke-test.sh
index c8b7156..4696ec9 100755
--- a/scripts/smoke-test.sh
+++ b/scripts/smoke-test.sh
@@ -38,7 +38,11 @@ b=$(curl -s --max-time 8 -X POST "$BASE/api/bookings" \
   -d '{"client_name":"Smoke Test","client_email":"smoke@test.lisilou","session_date":"2099-12-31","session_type":"individual","session_length":"mini","location":"studio"}')
 [[ "$b" == *'"id"'* ]] && ok "POST /api/bookings → returns id" || fail "POST /api/bookings → returns id (got: $b)"
 
-# 6. Nginx does not 500 on unknown /api/ path
+# 6. Signed contract 404s gracefully (no file for nonexistent booking)
+s=$(http_status "$BASE/api/bookings/99999/contract")
+[ "$s" = "404" ] && ok "GET /api/bookings/99999/contract → 404" || fail "GET /api/bookings/99999/contract → 404 (got $s)"
+
+# 7. Nginx does not 500 on unknown /api/ path
 s=$(http_status "$BASE/api/nonexistent-route")
 [ "$s" != "500" ] && ok "GET /api/unknown → not 500 (got $s)" || fail "GET /api/unknown → 500 (nginx misconfigured)"