diff --git a/openbao/policies/agent-high-risk-boundary.hcl b/openbao/policies/agent-high-risk-boundary.hcl
index 0940498..eb3eb85 100644
--- a/openbao/policies/agent-high-risk-boundary.hcl
+++ b/openbao/policies/agent-high-risk-boundary.hcl
@@ -108,6 +108,14 @@ path "platform/metadata/workloads/policy-nexus/forgejo-source-read" {
   capabilities = ["deny"]
 }
 
+# CCR-2026-0031: core-hub private-source read token is ESO-only.
+path "platform/data/workloads/core-hub/forgejo-source-read" {
+  capabilities = ["deny"]
+}
+path "platform/metadata/workloads/core-hub/forgejo-source-read" {
+  capabilities = ["deny"]
+}
+
 # RPF-WP-0035-T04: preflight signing key is API-only.
 path "platform/data/workloads/state-hub/repository-rename-preflight" {
   capabilities = ["deny"]