diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml
index 70b5da6..3d8d928 100644
--- a/.github/workflows/release-pr.yml
+++ b/.github/workflows/release-pr.yml
@@ -1,7 +1,9 @@
 name: Release PR
 
 on:
-  push:
+  workflow_run:
+    workflows: [CI]
+    types: [completed]
     branches: [main]
 
 permissions:
@@ -10,6 +12,9 @@ permissions:
 
 jobs:
   release-plz:
+    if: >-
+      github.event.workflow_run.conclusion == 'success'
+      && !startsWith(github.event.workflow_run.head_commit.message, 'chore: release')
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
diff --git a/release-plz.toml b/release-plz.toml
index 56c4b7b..6a707b2 100644
--- a/release-plz.toml
+++ b/release-plz.toml
@@ -29,6 +29,12 @@ semver_check = false
 # disable cargo publish - not published to crates.io (default for binary crate)
 publish = false
 
+# Root binary crate — not released via release-plz
+[[package]]
+name = "rara-cli-template"
+release = false
+changelog_update = false
+
 # Publish derive crate first (agent-describe depends on it)
 [[package]]
 name = "agent-describe-derive"