diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..3fe42bd
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,30 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  build-and-test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [18, 20, 22]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+
+      - run: npm install
+      - run: npm run build
+      - run: npm test
+      - run: npm run lint
+      - run: npm run typecheck
+
+      - name: Verify package contents
+        run: npm pack --dry-run
diff --git a/README.md b/README.md
index ac902e6..3b3a155 100644
--- a/README.md
+++ b/README.md
@@ -44,7 +44,7 @@ Add to `.mcp.json` and go:
   "mcpServers": {
     "tripwire": {
       "command": "npx",
-      "args": ["-y", "@simonrueba/tripwire", "serve", "--project", "."]
+      "args": ["-y", "@tripwire-mcp/tripwire", "serve", "--project", "."]
     }
   }
 }
@@ -57,7 +57,7 @@ For Cursor, use `.cursor/mcp.json` with the same config.
 Pin as a dev dependency so everyone gets the same version:
 
 ```bash
-npm install --save-dev @simonrueba/tripwire
+npm install --save-dev @tripwire-mcp/tripwire
 ```
 
 Add scripts to `package.json`:
@@ -88,7 +88,7 @@ Point `.mcp.json` at the local install (no `-y` needed):
 ### Alternative: global install
 
 ```bash
-npm install -g @simonrueba/tripwire
+npm install -g @tripwire-mcp/tripwire
 ```
 
 ### Any MCP-compatible client
diff --git a/SECURITY.md b/SECURITY.md
index 5ce638b..78fd303 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -71,7 +71,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with: { node-version: "20" }
-      - run: npx -y @simonrueba/tripwire lint --strict
+      - run: npx -y @tripwire-mcp/tripwire lint --strict
 ```
 
 ### Block agent-authored critical tripwires
diff --git a/examples/hello-tripwire/.mcp.json b/examples/hello-tripwire/.mcp.json
index f2e9e01..efe7d31 100644
--- a/examples/hello-tripwire/.mcp.json
+++ b/examples/hello-tripwire/.mcp.json
@@ -2,7 +2,7 @@
   "mcpServers": {
     "tripwire": {
       "command": "npx",
-      "args": ["@simonrueba/tripwire", "serve", "--project", "."]
+      "args": ["@tripwire-mcp/tripwire", "serve", "--project", "."]
     }
   }
 }
diff --git a/package.json b/package.json
index e3a0d67..ac3bdc5 100644
--- a/package.json
+++ b/package.json
@@ -1,5 +1,5 @@
 {
-  "name": "@simonrueba/tripwire",
+  "name": "@tripwire-mcp/tripwire",
   "version": "0.1.0",
   "description": "Context injection for AI agents, triggered by the codebase itself",
   "type": "module",
@@ -23,7 +23,9 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md",
+    "LICENSE"
   ],
   "scripts": {
     "build": "tsc",
@@ -31,7 +33,9 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
-    "lint": "eslint src/ tests/"
+    "lint": "eslint src/ tests/",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run clean && npm run build && npm test"
   },
   "keywords": [
     "mcp",