diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 1a19f8b..9d2fd61 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -55,20 +55,6 @@ jobs:
           NISSE_OPERATOR_TOKEN: ${{ secrets.NISSE_OPERATOR_TOKEN }}
         run: uv run pytest -m "integration and not e2e" -rs
 
-  image:
-    # The agent's image builds (Dockerfile), so a broken one shows before a
-    # release does. On PRs only; nothing is pushed.
-    if: github.event_name != 'push'
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Build the agent and test images
-        run: |
-          docker build --target agent -t nisse-dev:ci .
-          docker build --target test -t nisse-dev:ci-test .
-          docker run --rm nisse-dev:ci 2>&1 | grep -q "cannot start: no config file"
-
   e2e:
     # The end-to-end suite (scripts/e2e.sh): the whole agent against real
     # services, every role on a local model, so it spends nothing but keeps
diff --git a/docs/Development-Plan.md b/docs/Development-Plan.md
index 27e944d..5127628 100644
--- a/docs/Development-Plan.md
+++ b/docs/Development-Plan.md
@@ -280,7 +280,7 @@ accepted once a tag's image passes the e2e suite.
 - The image runs as its own user; state in `/var/lib/nisse-dev`, configuration
   mounted at `/etc/nisse-dev/nisse-dev.yaml`, secrets as environment variables,
   keys mounted read-only. Its `test` stage carries the tests over the installed
-  package, for `scripts/e2e.sh --image REF`. CI builds both on every PR;
+  package, for `scripts/e2e.sh --image REF`. Images are built only on release:
   `release.yml` pushes `gitea.dongar.net/dev/nisse-dev:<version>` and `:latest`
   on a published release (`REGISTRY_TOKEN`, the `dev` organization's).
 - The live bring-up's switch to the image waits for the next live test (it needs