diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 9051b32..3c083fc 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -4,13 +4,25 @@ on:
   push:
     branches:
       - main
+    paths-ignore:
+      - "docs/**"
+      - "**/*.md"
 
 jobs:
   smoke:
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v3
+      - name: Checkout exact source from Gitea
+        run: |
+          set -euo pipefail
+          repo_url="${GITHUB_SERVER_URL:-http://192.168.0.110:3001}/${GITHUB_REPOSITORY:-wooo/agent-bounty-protocol}.git"
+          ref="${GITHUB_SHA:?missing GITHUB_SHA}"
+          git init .
+          git remote remove origin 2>/dev/null || true
+          git remote add origin "$repo_url"
+          git fetch --no-tags --depth=1 origin "$ref"
+          git checkout --force --detach FETCH_HEAD
 
       - name: Validate shell scripts
         run: |