diff --git a/.github/workflows/harness.yml b/.github/workflows/harness.yml
new file mode 100644
index 0000000..5341df9
--- /dev/null
+++ b/.github/workflows/harness.yml
@@ -0,0 +1,17 @@
+name: Harness
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  harness:
+    uses: Pollora/harness/.github/workflows/template.yml@v0.1.11
+    with:
+      mode: enforce
+    permissions:
+      contents: read
diff --git a/bin/replacements.php b/bin/replacements.php
index 6d81e48..2ce74d2 100644
--- a/bin/replacements.php
+++ b/bin/replacements.php
@@ -9,7 +9,7 @@
  * bin/ci/install.php, which substitutes them in the commit under test so CI
  * measures the theme as a user receives it, not the template.
  *
- * @return array<string, string>  placeholder => a plausible substituted value
+ * @return array<string, string> placeholder => a plausible substituted value
  */
 function scaffolderReplacements(string $slug = 'my-theme'): array
 {