diff --git a/.github/workflows/opencode-review-dispatch.yml b/.github/workflows/opencode-review-dispatch.yml
index 83f6830d5..052928b08 100644
--- a/.github/workflows/opencode-review-dispatch.yml
+++ b/.github/workflows/opencode-review-dispatch.yml
@@ -653,6 +653,7 @@ jobs:
               r-cran-covr \
               r-cran-testthat \
               rustc \
+              llvm \
               util-linux \
               vulkan-tools \
               xz-utils \
@@ -1729,6 +1730,24 @@ jobs:
               failures=$((failures + 1))
               return 1
             fi
+            # cargo-llvm-cov needs llvm-cov/llvm-profdata. Prefer env overrides, else
+            # Debian llvm tools baked into the offline image (no network installers).
+            if [ -z "${LLVM_COV:-}" ] && command -v llvm-cov >/dev/null 2>&1; then
+              export LLVM_COV="$(command -v llvm-cov)"
+            fi
+            if [ -z "${LLVM_PROFDATA:-}" ] && command -v llvm-profdata >/dev/null 2>&1; then
+              export LLVM_PROFDATA="$(command -v llvm-profdata)"
+            fi
+            if [ -z "${LLVM_COV:-}" ] || [ -z "${LLVM_PROFDATA:-}" ]; then
+              append "### Rust coverage toolchain"
+              append ""
+              append "- Result: FAIL"
+              append "- Reason: llvm-cov/llvm-profdata are unavailable (llvm-tools-preview / LLVM_COV not set)."
+              append "- Fix: bake llvm tools into the trusted offline coverage image, then rerun current-head evidence."
+              append ""
+              failures=$((failures + 1))
+              return 1
+            fi
             ensure_rust_gpu_adapter
             ensure_rust_desktop_deps
           }