diff --git a/backend/tests/test_kpi_causality.py b/backend/tests/test_kpi_causality.py
index d27bc371..b4b739b4 100644
--- a/backend/tests/test_kpi_causality.py
+++ b/backend/tests/test_kpi_causality.py
@@ -348,6 +348,6 @@ class TestPermissions:
         assert resp.status_code == 200
 
     def test_no_token_denied(self, client: TestClient):
-        """无token → 401（HTTPBearer 标准行为）"""
+        """无token → 403（router级 require_role 直接拒绝，与 test_reports 约定一致）"""
         resp = client.get(BASE)
-        assert resp.status_code == 401
+        assert resp.status_code == 403