diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 07cb1b13a..1a2e6a878 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -124,11 +124,14 @@ jobs:
               working-directory: apps/web
 
             - name: Lint
-              # NOTE: --max-warnings is temporarily raised to 2000 while the
-              # team resorbs the ESLint warning backlog (1167 at last count,
-              # mostly @typescript-eslint/no-explicit-any and unused vars).
-              # Lower this gradually as warnings are fixed.
-              run: npx eslint --max-warnings=2000 .
+              # ESLint warning baseline freeze (v1.0.10 polish):
+              # 1204 is the current count of legacy warnings (mostly the
+              # custom no-restricted-syntax 721, plus @typescript-eslint
+              # no-non-null-assertion 139, no-unused-vars 134,
+              # no-explicit-any 115, react-hooks/exhaustive-deps 47).
+              # CI fails on ANY new warning. Lower this number as warnings
+              # are resorbed by feature work; never raise it.
+              run: npx eslint --max-warnings=1204 .
               working-directory: apps/web
 
             - name: Typecheck