diff --git a/cli/src/main/resources/buzz-agent/workflow-ship.sh b/cli/src/main/resources/buzz-agent/workflow-ship.sh
index a4140e5388..68e68d32bc 100755
--- a/cli/src/main/resources/buzz-agent/workflow-ship.sh
+++ b/cli/src/main/resources/buzz-agent/workflow-ship.sh
@@ -28,6 +28,8 @@ cd "$BUZZ_WORKTREE" || die "cannot cd into worktree $BUZZ_WORKTREE"
 base_branch="$(gh repo view --json defaultBranchRef -q .defaultBranchRef.name 2>/dev/null || echo main)"
 case "$BUZZ_BRANCH" in
     "$base_branch" | main | master) die "refusing to operate on the default branch ($BUZZ_BRANCH)" ;;
+    # Anything else is a per-run branch — the only thing this script is allowed to push.
+    *) : ;;
 esac
 
 title="$(git log -1 --format='%s' 2>/dev/null | cut -c1-72)"
diff --git a/tools/buzz-agent/workflow-ship.sh b/tools/buzz-agent/workflow-ship.sh
index a4140e5388..68e68d32bc 100755
--- a/tools/buzz-agent/workflow-ship.sh
+++ b/tools/buzz-agent/workflow-ship.sh
@@ -28,6 +28,8 @@ cd "$BUZZ_WORKTREE" || die "cannot cd into worktree $BUZZ_WORKTREE"
 base_branch="$(gh repo view --json defaultBranchRef -q .defaultBranchRef.name 2>/dev/null || echo main)"
 case "$BUZZ_BRANCH" in
     "$base_branch" | main | master) die "refusing to operate on the default branch ($BUZZ_BRANCH)" ;;
+    # Anything else is a per-run branch — the only thing this script is allowed to push.
+    *) : ;;
 esac
 
 title="$(git log -1 --format='%s' 2>/dev/null | cut -c1-72)"