diff --git a/compose.yaml b/compose.yaml
index a49cc33..46dcbc1 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -39,7 +39,7 @@ services:
       - agentci_data:/var/lib/agentci
       - ./install-scripts:/etc/agentci/install-scripts:ro
     tmpfs:
-      - /run/agentci
+      - /run/agentci:mode=1777
     expose:
       - "8080"
     networks:
@@ -78,7 +78,7 @@ services:
       - agentci_data:/var/lib/agentci
       - opencode_home:/var/lib/opencode
     tmpfs:
-      - /run/agentci
+      - /run/agentci:mode=1777
     expose:
       - "4096"
     networks:
diff --git a/tests/test_opencode_deployment.py b/tests/test_opencode_deployment.py
index b63dbb8..ebc68fc 100644
--- a/tests/test_opencode_deployment.py
+++ b/tests/test_opencode_deployment.py
@@ -26,6 +26,7 @@ def test_compose_removes_codex_sandbox_exceptions() -> None:
     assert "opencode_home:/var/lib/opencode" in compose
     assert "HOME: /etc/opencode/home" in compose
     assert "OPENCODE_DISABLE_EXTERNAL_SKILLS" in compose
+    assert compose.count("/run/agentci:mode=1777") == 2
     assert "AGENTCI_OPENCODE_VERSION: ${AGENTCI_OPENCODE_VERSION:-^1}" in compose
     assert "ARG AGENTCI_OPENCODE_VERSION=^1" in dockerfile
     assert '"opencode-ai@${AGENTCI_OPENCODE_VERSION}"' in dockerfile