diff --git a/.forgejo/workflows/test.yml b/.forgejo/workflows/test.yml
index c26b7d74..3b03fd54 100644
--- a/.forgejo/workflows/test.yml
+++ b/.forgejo/workflows/test.yml
@@ -4,8 +4,10 @@ name: test
 # locally via docker-compose; they should guard with testing.Short().
 
 on:
-  push:
-    branches: [dev]
+  # PRs against main are the gate. Direct pushes to dev no longer trigger
+  # CI on their own — opening a PR fires the pull_request event and gates
+  # the merge. Avoids the duplicate push+pull_request runs we were
+  # accumulating on every PR commit.
   pull_request:
     branches: [main]