diff --git a/.gitea/workflows/cloudflare-auto-pr-tofu-pipeline.yml b/.gitea/workflows/cloudflare-auto-pr-tofu-pipeline.yml
index 96f8910..1cc58c9 100644
--- a/.gitea/workflows/cloudflare-auto-pr-tofu-pipeline.yml
+++ b/.gitea/workflows/cloudflare-auto-pr-tofu-pipeline.yml
@@ -187,6 +187,12 @@ jobs:
         run: |
           echo "✅ Approved! Proceeding with deployment..."
 
+      - name: Denial (seems it had to come...)
+        if: steps.tf-plan-approval.outputs.approval_status != 'approved'
+        run: |
+          echo "❌ Not approved. Exiting workflow..."
+          exit 1
+
   # apply:
   #   name: Apply Tofu Plan
   #   needs: plan-approval