diff --git a/RULESET_VERIFY.md b/RULESET_VERIFY.md
new file mode 100644
index 0000000..e2e8a63
--- /dev/null
+++ b/RULESET_VERIFY.md
@@ -0,0 +1,10 @@
+# Org ruleset verification
+
+Temporary marker used to validate the org-level `protect-main` ruleset
+in its rolled-out state:
+
+- `Claude Security Review (required)` runs against this PR
+- The check gates the merge button until the workflow completes
+- The diff is benign markdown, so the scan should finish green
+
+Delete this file once verification is complete.