diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
deleted file mode 100644
index 9487d37..0000000
--- a/.github/workflows/ci.yml
+++ /dev/null
@@ -1,20 +0,0 @@
-name: ci
-on:
-  pull_request:
-  push:
-    branches: [main]
-permissions:
-  contents: read
-jobs:
-  build-test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
-        with: { egress-policy: audit }
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
-        with: { bun-version: 1.3.14 }
-      - run: bun install --frozen-lockfile
-      - run: bun run build
-      - run: bun test
-      - run: bunx jsr publish --dry-run --allow-slow-types
diff --git a/.github/workflows/standard.yml b/.github/workflows/standard.yml
new file mode 100644
index 0000000..3776576
--- /dev/null
+++ b/.github/workflows/standard.yml
@@ -0,0 +1,17 @@
+# The one workflow. Opts into org-standard behaviors; logic lives in the reusable
+# bounded-systems/.github/.github/workflows/repo-standard.yml.
+name: standard
+on:
+  push:
+    branches: [main]
+  pull_request:
+permissions:
+  contents: read
+jobs:
+  standard:
+    uses: bounded-systems/.github/.github/workflows/repo-standard.yml@d43c3280588ef05f4ead43426db1091d4cb8f520
+    with:
+      security: true
+      test: true
+      runtime: bun
+      test-command: "bun install --frozen-lockfile && bun run build && bun test && bunx jsr publish --dry-run --allow-slow-types"