diff --git a/services/maintenance/apps/ariadne-deployment.yaml b/services/maintenance/apps/ariadne-deployment.yaml
index 65b91d2d7..1251a1c7b 100644
--- a/services/maintenance/apps/ariadne-deployment.yaml
+++ b/services/maintenance/apps/ariadne-deployment.yaml
@@ -465,13 +465,13 @@ spec:
             - name: ARIADNE_HERMES_AUTOREMEDIATION_ENABLED
               value: "true"
             - name: ARIADNE_HERMES_ALLOWED_ACTIONS
-              value: repair_demo_fixture,retry_transient_infra
+              value: repair_demo_fixture,retry_transient_infra,reclaim_workspace_storage
             # Each classification maps to exactly one action id. A diagnosis
             # whose classification is absent here can never reach an action,
             # and a diagnosis asking for an action that is not its
             # classification's own is refused before anything runs.
             - name: ARIADNE_HERMES_ACTION_CLASSIFICATIONS
-              value: known_demo_fixture_failure=repair_demo_fixture,transient_infra_failure=retry_transient_infra
+              value: known_demo_fixture_failure=repair_demo_fixture,transient_infra_failure=retry_transient_infra,workspace_storage_exhausted=reclaim_workspace_storage
             # Adds a service's own namespace to log evidence alongside
             # jenkins, so a build failure that coincides with the service being
             # unhealthy carries some trace of the service. Only mapped jobs are