diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..3b23471
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,2 @@
+# Every change is reviewed by an owner before merge.
+* @cohenrobinson
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..f95d397
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,17 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: monthly
+      time: "05:00"  # 1st of the month, 05:00 Melbourne
+      timezone: Australia/Melbourne
+    cooldown:
+      default-days: 5
+    open-pull-requests-limit: 3
+    target-branch: main
+    assignees: [cohenrobinson]
+    labels: [dependencies, github-actions]
+    groups:
+      github-actions-all:
+        patterns: ["*"]
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..dbd0f81
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,25 @@
+name: CI
+
+# Mintlify publishes on merge to main, so broken internal links are caught here.
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  broken-links:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2
+        with:
+          egress-policy: audit
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
+        with:
+          node-version: "22"
+      - name: Check internal links
+        run: npx --yes mint@4.2.1070 broken-links
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
new file mode 100644
index 0000000..45dfe44
--- /dev/null
+++ b/.github/workflows/pr-title.yml
@@ -0,0 +1,14 @@
+name: PR Title
+
+# The squash commit takes its subject from the PR title, so it must be a
+# conventional commit. See Utilified/.github reusable-pr-title.yml.
+on:
+  pull_request:
+    types: [opened, edited, reopened, synchronize]
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    uses: Utilified/.github/.github/workflows/reusable-pr-title.yml@255a3d39f67a2da209e8ba147dd2b457b74c98be # main