diff --git a/services/maintenance/apps/soteria-configmap.yaml b/services/maintenance/apps/soteria-configmap.yaml
index a8c6bcb1..d1eb8f0a 100644
--- a/services/maintenance/apps/soteria-configmap.yaml
+++ b/services/maintenance/apps/soteria-configmap.yaml
@@ -21,7 +21,8 @@ data:
   SOTERIA_JOB_MEMORY_REQUEST: 256Mi
   SOTERIA_JOB_MEMORY_LIMIT: 4Gi
   SOTERIA_EXCLUDED_STORAGE_CLASSES: local-path
-  SOTERIA_EXCLUDED_PVCS: jenkins/jenkins-dind-cache
+  # Inference workspaces and job material must stay on approved local storage.
+  SOTERIA_EXCLUDED_PVCS: jenkins/jenkins-dind-cache,hermes/*
   SOTERIA_LONGHORN_URL: http://longhorn-backend.longhorn-system.svc:9500
   SOTERIA_LONGHORN_BACKUP_MODE: incremental
   SOTERIA_AUTH_REQUIRED: "true"
diff --git a/services/maintenance/apps/soteria-deployment.yaml b/services/maintenance/apps/soteria-deployment.yaml
index 2d79ed18..3d6e6224 100644
--- a/services/maintenance/apps/soteria-deployment.yaml
+++ b/services/maintenance/apps/soteria-deployment.yaml
@@ -17,7 +17,7 @@ spec:
       labels:
         app: soteria
       annotations:
-        soteria.bstein.dev/config-revision: "2026-07-16-longhorn-backup-driver"
+        soteria.bstein.dev/config-revision: "2026-10-03-local-only-exclusion"
     spec:
       serviceAccountName: soteria
       nodeSelector: