From bb3fc59288d620a1086ffbe9e6ece4ad70aba3e0 Mon Sep 17 00:00:00 2001
From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
Date: Sat, 13 Jun 2026 14:43:40 +0100
Subject: [PATCH] =?UTF-8?q?ci:=20cut=20Actions=20burn=20=E2=80=94=20scope?=
 =?UTF-8?q?=20push=20triggers=20+=20concurrency-cancel?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Workflows fired on bare `[push, pull_request]`, running twice per PR commit
(branch push + PR synchronize). Scope push to [main, master] so PRs fire once;
add concurrency cancel-in-progress (read-only PR checks). Reduces the Actions
minute burn behind the estate spending-limit wall. No SPDX/logic changes.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/workflows/elixir-ci.yml        | 11 ++++++++++-
 .github/workflows/rescript-deno-ci.yml | 11 ++++++++++-
 2 files changed, 20 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/elixir-ci.yml b/.github/workflows/elixir-ci.yml
index 2ac0420..53ba7a3 100644
--- a/.github/workflows/elixir-ci.yml
+++ b/.github/workflows/elixir-ci.yml
@@ -3,7 +3,16 @@
 # See standards#174 for the reusable's purpose.
 
 name: Elixir CI
-on: [push, pull_request]
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+
+# Estate guardrail: scope push to default branches so a PR fires once (not
+# push+PR), and cancel superseded runs. Safe — read-only PR-triggered check.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 permissions:
   contents: read
diff --git a/.github/workflows/rescript-deno-ci.yml b/.github/workflows/rescript-deno-ci.yml
index a9d8c07..15c6056 100644
--- a/.github/workflows/rescript-deno-ci.yml
+++ b/.github/workflows/rescript-deno-ci.yml
@@ -3,7 +3,16 @@ permissions:
   contents: read
 
 name: Deno CI
-on: [push, pull_request]
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+
+# Estate guardrail: scope push to default branches so a PR fires once (not
+# push+PR), and cancel superseded runs. Safe — read-only PR-triggered check.
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   build: