diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index fc4ec447..8cb2b2f0 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -1,6 +1,7 @@
 name: CI
 
 on:
+  # No `push` trigger, so nothing re-validates a merge commit on main — an accepted infra-load tradeoff (mara, #3938, 2026-09-16), not an oversight.
   pull_request:
     branches: ["**"]
   # Lets `hive-forge ci-rerun` re-trigger CI via workflow-dispatch API