diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index d55f2dd..4b01b5d 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -32,9 +32,9 @@ jobs:
           no_proxy: "*"
         run: |
           rm -rf /tmp/ci-venv-lint
-          python3 -m venv /tmp/ci-venv-lint
+          /usr/bin/python3 -m venv /tmp/ci-venv-lint  # 钉解释器：runner PATH 首位 homebrew python3=3.14（tokenize 行为变化致 E122 误报）；3.9.6=6月绿基线
           /tmp/ci-venv-lint/bin/pip install --quiet --upgrade pip
-          /tmp/ci-venv-lint/bin/pip install --quiet flake8
+          /tmp/ci-venv-lint/bin/pip install --quiet 'flake8==7.3.0'  # 锁版本（防漂移）。注：首版归因 pycodestyle 有误，真因是解释器 3.14 tokenize 变化，见本 PR 后续 commit
 
       - name: Lint with flake8
         run: |
@@ -52,7 +52,7 @@ jobs:
           no_proxy: "*"
         run: |
           rm -rf /tmp/ci-venv-test
-          python3 -m venv /tmp/ci-venv-test
+          /usr/bin/python3 -m venv /tmp/ci-venv-test  # 同钉 3.9.6：pydantic<2 无 3.14 wheel；全量 503 用例本地实证绿
           /tmp/ci-venv-test/bin/pip install --quiet --upgrade pip
           /tmp/ci-venv-test/bin/pip install --quiet 'fastapi' 'pydantic<2' pyyaml uvicorn requests pytest pytest-asyncio httpx