diff --git a/AGENTS.md b/AGENTS.md
index d3a50cc..7d9f642 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -16,8 +16,9 @@ run `just --list`, or read it. Every recipe carries its intent as a comment. The
 - `just test [args]` forwards args **unquoted**, so a spaced `-k` expression word-splits and fails.
   Run one keyword per invocation, or a substring matching all targets.
 - `tests/test_unit.py` + `tests/test_fake.py` need no Postgres and run directly under `uv run
-  pytest`; `tests/test_integration.py` skips if `POSTGRES_DSN` is unreachable. The coverage gate is
-  on by default, so a partial run trips it; pass `--no-cov` while iterating.
+  pytest`; `tests/test_integration.py` skips if `POSTGRES_DSN` is unreachable. The compose Postgres
+  publishes no host port, so run the DB tests through `just test`. The coverage gate is on by
+  default, so a partial run trips it; pass `--no-cov` while iterating.
 - Nothing validates Markdown links outside `docs/`. `just docs-build` runs `mkdocs --strict` over
   the site only; root Markdown, `.github/`, and `docs/agents/` are unchecked.
 
diff --git a/docker-compose.yml b/docker-compose.yml
index 41a41d6..aed2ccd 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -26,8 +26,6 @@ services:
       - POSTGRES_USER=outbox
       - POSTGRES_PASSWORD=outbox
       - POSTGRES_DB=outbox
-    ports:
-      - "5432:5432"
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U outbox -d outbox"]
       interval: 1s