diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index ed564db..1f2f614 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -1,10 +1,11 @@
 name: validate
 
-# CI for the intelligence repo. Three checks, all advisory rules made
+# CI for the intelligence repo. Four checks, all advisory rules made
 # deterministic (prose is advisory; CI guarantees it - see docs/ARCHITECTURE.md):
 #   1. Frontmatter - every canonical file carries the required fields
 #   2. Secrets - gitleaks scan; a leak fails the build
 #   3. Links - no broken relative links between Markdown files
+#   4. Brain lint - the gbrain-company-brain linter, as a GitHub Action
 
 on:
   pull_request:
@@ -23,6 +24,18 @@ jobs:
       - name: Validate frontmatter on canonical files
         run: bash scripts/validate-frontmatter.sh
 
+  brain-lint:
+    name: Company brain lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      # Same checks gbrain-company-brain runs before a gbrain sync: page types the
+      # pack declares, pages in the right folder, dated decisions, no dangling
+      # wikilinks. Findings show up as annotations on the pull request.
+      - uses: mattzimak/gbrain-company-brain@v0.2.0
+        with:
+          path: .
+
   secrets:
     name: Secret scan (gitleaks)
     runs-on: ubuntu-latest
diff --git a/runbooks/bootstrap.md b/runbooks/bootstrap.md
index 6bee2b3..9b745f6 100644
--- a/runbooks/bootstrap.md
+++ b/runbooks/bootstrap.md
@@ -1,3 +1,16 @@
+---
+type: runbook
+title: "Bootstrap: connect an agent harness to this brain"
+status: verified
+owner: "{{FOUNDER_NAME}}"
+created: 2026-09-16
+updated: 2026-09-21
+last_verified: 2026-09-21
+source_of_truth: manual
+tags: [gbrain, skillpack]
+audience: internal
+---
+
 # Bootstrap
 
 Post-scaffold steps for a harness connecting to this company brain. gbrain