diff --git a/.forgejo/workflows/check.yml b/.forgejo/workflows/check.yml
index 0de9b04..5757b87 100644
--- a/.forgejo/workflows/check.yml
+++ b/.forgejo/workflows/check.yml
@@ -1,17 +1,24 @@
 name: PR Check
 
-# Validates Rust + frontend on every branch push and PR.
+# Validates Rust + frontend on every PR opened against main.
 # Goal: catch compile errors, type errors, and failing tests BEFORE merge,
 # instead of waiting for the release tag (which is when release.yml runs).
+#
+# Trigger is `pull_request` only — the previous `push` trigger duplicated
+# every run when a branch was pushed and immediately opened as a PR (#171).
+# Trade-off: branches pushed without an open PR don't get CI feedback. Open
+# a draft PR if you want feedback before requesting review.
 
 on:
-  push:
-    branches-ignore:
-      - main
   pull_request:
     branches:
       - main
 
+# Cancel obsolete runs (e.g. on force-push) so only the latest commit runs.
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   rust:
     runs-on: ubuntu
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 9ec92a1..7df29ac 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -2,15 +2,20 @@ name: PR Check
 
 # Mirror of .forgejo/workflows/check.yml using GitHub-native runners.
 # Forgejo is the primary host; this file keeps the GitHub mirror functional.
+#
+# Trigger is `pull_request` only — kept in sync with the Forgejo workflow
+# after #171 dropped the redundant `push` trigger that duplicated every run.
 
 on:
-  push:
-    branches-ignore:
-      - main
   pull_request:
     branches:
       - main
 
+# Cancel obsolete runs (e.g. on force-push) so only the latest commit runs.
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   rust:
     runs-on: ubuntu-latest