diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fbf65f51..ee97eb66 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,8 +10,8 @@ permissions:
   contents: read
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.event_name == 'push' && github.ref == 'refs/heads/main' && github.sha || github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ !(github.event_name == 'push' && github.ref == 'refs/heads/main') }}
 
 env:
   CARGO_TERM_COLOR: always
diff --git a/AGENTS.md b/AGENTS.md
index 74f22f17..28ea4158 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -146,8 +146,8 @@ workflows. `mise.toml` holds local-only mise hooks.
 CI builds and validates the plugin packages on Linux. It runs the JavaScript
 daemon client and the Pi and OpenCode unit tests, and builds, tests, and lints
 the Rust daemon, on Linux, macOS, and Windows. Pushes to `main` and manual runs
-refresh the Rust build cache that pull requests restore. Concurrent runs for an
-obsolete branch revision are cancelled.
+refresh the Rust build cache that pull requests restore. Every push to `main`
+runs independently; superseded pull request runs are cancelled.
 
 ## Secrets