diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 90d960aa..65ef9239 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -56,9 +56,11 @@ jobs:
       - name: Run Django Migrations
         run: python manage.py migrate --noinput
 
-      # Includes the vrtManager tests
+      # Includes the vrtManager tests; fails below the coverage floor in pyproject.toml
       - name: Run Test Suite
-        run: python manage.py test
+        run: |
+          coverage run manage.py test
+          coverage report --skip-covered
 
       - name: Validate OpenAPI Schema
         run: python manage.py spectacular --validate --fail-on-warn --file /dev/null
diff --git a/pyproject.toml b/pyproject.toml
index 486d282b..960e0712 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,3 +9,11 @@ select = ["E9", "F"]
 [tool.ruff.lint.per-file-ignores]
 # Settings overlay: re-exports the base settings by design.
 "webvirtcloud/settings-dev.py" = ["F403", "F405"]
+
+[tool.coverage.run]
+source = ["."]
+omit = [".venv/*", "*/migrations/*", "*/test*.py", "*/tests.py", "manage.py", "webvirtcloud/settings*.py"]
+
+[tool.coverage.report]
+# Measured 51% without the live libvirt suite (2026-10-03); raise as tests grow.
+fail_under = 50