diff --git a/infra/k8s/argo/compile-and-train-template.yaml b/infra/k8s/argo/compile-and-train-template.yaml
index 6c5503805..37a8d3967 100644
--- a/infra/k8s/argo/compile-and-train-template.yaml
+++ b/infra/k8s/argo/compile-and-train-template.yaml
@@ -24,8 +24,10 @@ spec:
     labels:
       app.kubernetes.io/part-of: foxhunt
       app.kubernetes.io/component: compile-and-train
-  # No pod-level securityContext — compile (ci-builder) and Kaniko need root,
-  # training steps (foxhunt-training-runtime) run as UID 1000 in the image.
+  # No runAsUser — compile (ci-builder) needs root, training runtime defaults
+  # to its image user. fsGroup ensures workspace PVC is writable by all pods.
+  securityContext:
+    fsGroup: 0
   ttlStrategy:
     secondsAfterCompletion: 3600
   activeDeadlineSeconds: 28800  # 8 hours (compile + full training)