diff --git a/.github/workflows/agent-shield.yml b/.github/workflows/agent-shield.yml
new file mode 100644
index 00000000..99c3f94c
--- /dev/null
+++ b/.github/workflows/agent-shield.yml
@@ -0,0 +1,26 @@
+# Agent Shield — thin caller that delegates to the org-level reusable workflow.
+# All logic is maintained centrally in agent-shield-reusable.yml.
+# Standard: https://github.com/petry-projects/.github/blob/main/standards/ci-standards.md#required-workflows
+name: Agent Shield
+
+on:
+  pull_request:
+    branches: [main]
+    types: [opened, reopened, synchronize]
+  issue_comment:
+    types: [created]
+  pull_request_review_comment:
+    types: [created]
+  issues:
+    types: [opened, edited, labeled]
+
+permissions: {}
+
+jobs:
+  agent-shield:
+    uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@main
+    secrets: inherit
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: read