diff --git a/.github/workflows/qwen-code-pr-review.yml b/.github/workflows/qwen-code-pr-review.yml
index 50ee0f5164c..36db89faae9 100644
--- a/.github/workflows/qwen-code-pr-review.yml
+++ b/.github/workflows/qwen-code-pr-review.yml
@@ -40,7 +40,8 @@ jobs:
          github.event.review.author_association == 'MEMBER' ||
          github.event.review.author_association == 'COLLABORATOR'))
     timeout-minutes: 15
-    runs-on: 'ubuntu-latest'
+    # ecs-qwen provides the internal review environment; trusted authors only.
+    runs-on: ['self-hosted', 'linux', 'x64', 'ecs-qwen']
     permissions:
       contents: 'read'
       id-token: 'write'
diff --git a/.gitignore b/.gitignore
index 9734c670574..b47511af99d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -27,6 +27,7 @@ package-lock.json
 .claude
 CLAUDE.md
 .codex
+.worktrees/
 
 # Qwen Code Configs
 .qwen/*
@@ -96,4 +97,4 @@ tmp/
 
 # code graph skills
 .venv
-.codegraph
\ No newline at end of file
+.codegraph