diff --git a/infra/docker-compose.yml b/infra/docker-compose.yml
index f854bae..045d24f 100644
--- a/infra/docker-compose.yml
+++ b/infra/docker-compose.yml
@@ -558,12 +558,16 @@ services:
       context: ./observability/tempo
     image: register-referentie/tempo:dev
     command: ["-config.file=/etc/tempo.yaml"]
+    # Cap the backplane's footprint so it can't starve the app stack + the Playwright browser on the
+    # memory-tight CI runner (verify-e2e OOM history, commit d5e5fa2). Generous vs idle (~150M).
+    mem_limit: 400m
     networks: [cg]
 
   prometheus:
     build:
       context: ./observability/prometheus
     image: register-referentie/prometheus:dev
+    mem_limit: 400m
     ports:
       - "9090:9090"
     networks: [cg]
@@ -572,6 +576,7 @@ services:
     build:
       context: ./observability/grafana
     image: register-referentie/grafana:dev
+    mem_limit: 512m
     environment:
       GF_SECURITY_ADMIN_USER: admin
       GF_SECURITY_ADMIN_PASSWORD: admin