diff --git a/deploy/kubernetes/acceptance/protocol-emulator.yaml b/deploy/kubernetes/acceptance/protocol-emulator.yaml
index 43469f1..3063a50 100644
--- a/deploy/kubernetes/acceptance/protocol-emulator.yaml
+++ b/deploy/kubernetes/acceptance/protocol-emulator.yaml
@@ -24,6 +24,14 @@ spec:
         easyai.io/worker: "true"
         easyai.io/database: "false"
         easyai.io/workload: "true"
+      tolerations:
+        # Dedicated Worker nodes are protected with this taint. The emulator
+        # deliberately shares their media/CPU path during validation while
+        # remaining excluded from database and control-plane nodes.
+        - key: easyai.io/worker-only
+          operator: Equal
+          value: "true"
+          effect: NoSchedule
       securityContext:
         runAsNonRoot: true
         runAsUser: 10001