diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 2f30de9..05ed9df 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -61,6 +61,13 @@ jobs:
   #     that proves the run identity, freeze it into the URL env var,
   #   * no match = hard failure, never a silent fallback or skip.
   integration:
+    # Gitea currently ignores workflow concurrency. A branch push followed by
+    # its PR synchronize event otherwise starts TWO 512 MiB OpenSearch JVMs
+    # and ClickHouse suites on the same runner fleet at once; both timed out
+    # creating their first index (runs 28904/28906). Keep the blocking LIVE
+    # integration proof on every PR, on main push, and on manual dispatch;
+    # ordinary branch pushes still run blocking quality/security.
+    if: github.event_name == 'pull_request' || github.ref == 'refs/heads/main' || github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
     services:
       opt-ci-opensearch: