diff --git a/ops/gcp_leoclean_runtime_role.sql b/ops/gcp_leoclean_runtime_role.sql
index 3755124..7ee4e94 100644
--- a/ops/gcp_leoclean_runtime_role.sql
+++ b/ops/gcp_leoclean_runtime_role.sql
@@ -800,7 +800,8 @@ begin
 end
 $function$;
 
--- Fresh function has no stale ACLs. Grant runtime, transfer ownership, done.
+-- Revoke default PUBLIC execute, grant only to runtime, then transfer ownership.
+revoke all on function kb_stage.stage_leoclean_proposal(text, text, text, text, jsonb) from public;
 grant execute on function kb_stage.stage_leoclean_proposal(text, text, text, text, jsonb)
   to leoclean_kb_runtime;
 alter function kb_stage.stage_leoclean_proposal(text, text, text, text, jsonb)