diff --git a/.github/workflows/dealix-ci.yml b/.github/workflows/dealix-ci.yml
index 2418ef8a..cbbe0f06 100644
--- a/.github/workflows/dealix-ci.yml
+++ b/.github/workflows/dealix-ci.yml
@@ -25,6 +25,9 @@ jobs:
       - name: Install dependencies
         run: |
           pip install -r requirements.txt -r requirements-dev.txt
+      - name: Architecture Brief (governance validation)
+        working-directory: salesflow-saas
+        run: python scripts/architecture_brief.py
       - name: Pytest (full suite + launch scenarios)
         env:
           DATABASE_URL: sqlite+aiosqlite:///./ci_dealix.db
diff --git a/salesflow-saas/backend/requirements-dev.txt b/salesflow-saas/backend/requirements-dev.txt
index df0d5f18..5fd48ebd 100644
--- a/salesflow-saas/backend/requirements-dev.txt
+++ b/salesflow-saas/backend/requirements-dev.txt
@@ -1,4 +1,5 @@
 # Dev / CI — not required in production images
-pytest>=8.0.0
-pytest-asyncio>=0.24.0
-aiosqlite>=0.20.0
+pytest>=8.0.0,<8.4.0
+pytest-asyncio>=0.24.0,<0.26.0
+aiosqlite>=0.20.0,<0.21.0
+httpx>=0.28.1,<0.29.0