diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2bf7c5a..945a519 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -96,3 +96,27 @@ jobs:
           after=$(find generated -type f -print0 | sort -z | xargs -0 sha256sum)
           test "$before" = "$after"
 
+  shell-integration:
+    name: Bash integration and installation guards
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    needs: [build]
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Run integration tests
+        run: |
+          set -euo pipefail
+          bash scripts/test-install-guards.sh --summary
+          bash scripts/test-plugin-selection.sh --summary
+          bash scripts/test-quick-update.sh --summary
+          bash scripts/test-managed-install.sh --summary
+          bash scripts/test-shell-packages.sh --summary
+      - name: Run doctor and prompt budget checks
+        run: |
+          bash scripts/doctor.sh --summary
+          bash scripts/prompt-budget.sh --summary
+      - name: Verify dry-run installation safety
+        run: |
+          bash scripts/install.sh --summary --dry-run --client both --shell bash
+          bash scripts/update.sh --summary --dry-run --client both --shell bash
+