diff --git a/.github/workflows/lychee.yml b/.github/workflows/lychee.yml
new file mode 100644
index 0000000..5e46750
--- /dev/null
+++ b/.github/workflows/lychee.yml
@@ -0,0 +1,24 @@
+name: lychee (broken links)
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+    branches: [master, main]
+  schedule:
+    - cron: '29 6 * * 1'
+
+permissions:
+  contents: read
+  issues: write
+
+jobs:
+  links:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+      - uses: lycheeverse/lychee-action@v2
+        with:
+          args: --no-progress --max-concurrency 4 --exclude-mail './**/*.md' './**/*.html'
+          fail: false  # warn-only on first install; flip to true once baseline is clean
diff --git a/.github/workflows/typos.yml b/.github/workflows/typos.yml
new file mode 100644
index 0000000..d25ee6b
--- /dev/null
+++ b/.github/workflows/typos.yml
@@ -0,0 +1,19 @@
+name: typos
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+    branches: [master, main]
+
+permissions:
+  contents: read
+
+jobs:
+  typos:
+    runs-on: ubuntu-latest
+    timeout-minutes: 3
+    steps:
+      - uses: actions/checkout@v4
+      - uses: crate-ci/typos@v1.30.0
+        continue-on-error: true  # warn-only — surface findings without blocking CI