diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
new file mode 100644
index 0000000..4af423a
--- /dev/null
+++ b/.github/workflows/labeler.yml
@@ -0,0 +1,11 @@
+name: Labeler
+on:
+  pull_request:
+    branches: [main]
+permissions:
+  contents: read
+  pull-requests: write
+  issues: write
+jobs:
+  label:
+    uses: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml@main
diff --git a/README.md b/README.md
index a16c417..a244d26 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,9 @@
 # seahaven-account-baseline
 
+![TypeScript](https://img.shields.io/badge/TypeScript-3178C6?logo=typescript&logoColor=white)
+![AWS CDK](https://img.shields.io/badge/AWS-CDK-FF9900?logo=amazonaws&logoColor=white)
+![CI](https://github.com/Sea-Haven-Industries/seahaven-account-baseline/actions/workflows/ci.yaml/badge.svg)
+
 Account-level security and governance baseline for Sea Haven Industries
 (AWS account **328440206208**), managed as a single CDK TypeScript app. Most
 resources are in **us-east-1**; the offsite backup vault is in **us-west-2**.