diff --git a/hive-c0re/src/matrix.rs b/hive-c0re/src/matrix.rs
index 2de2078e..b2af5b27 100644
--- a/hive-c0re/src/matrix.rs
+++ b/hive-c0re/src/matrix.rs
@@ -1514,6 +1514,13 @@ async fn resolve_room_alias(
 /// [`crate::stats::sweep_health::SweepHealth`] to raise a debounced
 /// dashboard banner on persistent failure (this sweep re-runs every 30
 /// minutes, so a one-off blip self-heals without ever bannering).
+#[allow(
+    clippy::too_many_lines,
+    reason = "sequential provisioning sweep — admin user, per-agent user/token \
+              sync, space + chat-room membership — each step's failure handling \
+              (log + continue + flip `ok`) is inherent to the aggregate bool \
+              contract, not something to factor away just to hit a line count"
+)]
 pub async fn ensure_all() -> bool {
     if !is_present().await {
         tracing::debug!("matrix: hive-matrix container absent, skipping user sweep");