diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 4717a79..24e516b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -19,7 +19,7 @@ jobs:
       matrix:
         language: ["actions"]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}
diff --git a/.github/workflows/doc-links.yml b/.github/workflows/doc-links.yml
index c4d533d..3339bc9 100644
--- a/.github/workflows/doc-links.yml
+++ b/.github/workflows/doc-links.yml
@@ -5,7 +5,7 @@ jobs:
   links:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: dtolnay/rust-toolchain@stable
       - run: |
           if [ ! -f tooling/doc-link-check ]; then
diff --git a/.github/workflows/fr-coverage.yml b/.github/workflows/fr-coverage.yml
index 744a8ac..d28d636 100644
--- a/.github/workflows/fr-coverage.yml
+++ b/.github/workflows/fr-coverage.yml
@@ -5,7 +5,7 @@ jobs:
   coverage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: dtolnay/rust-toolchain@stable
       - run: |
           if [ ! -f tooling/fr-coverage ]; then
diff --git a/.github/workflows/quality-gate.yml b/.github/workflows/quality-gate.yml
index 5e8f65d..3931b4c 100644
--- a/.github/workflows/quality-gate.yml
+++ b/.github/workflows/quality-gate.yml
@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-latest
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: dtolnay/rust-toolchain@stable
       - run: |
           if [ ! -f tooling/quality-gate ]; then
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 84bf42b..d6ffebb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: release
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - uses: dtolnay/rust-toolchain@stable
       - name: Publish to crates.io
         env:
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index aac6514..38f5e4f 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -19,7 +19,7 @@ jobs:
       actions: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml
index 1323ecb..a9ff362 100644
--- a/.github/workflows/secrets-scan.yml
+++ b/.github/workflows/secrets-scan.yml
@@ -13,7 +13,7 @@ jobs:
     name: TruffleHog
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
           fetch-depth: 0
       - uses: trufflesecurity/trufflehog@3fc0c2aa6648d54242e4af6fbfde0701796e4fb0  # was: @main
diff --git a/README.md b/README.md
index 3f40957..0b9f8f1 100644
--- a/README.md
+++ b/README.md
@@ -3,6 +3,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Quality Gate](https://github.com/KooshaPari/phenoAI/actions/workflows/quality-gate.yml/badge.svg)](https://github.com/KooshaPari/phenoAI/actions/workflows/quality-gate.yml)
 [![Rust](https://img.shields.io/badge/rust-1.75%2B-orange.svg)](https://www.rust-lang.org)
+[![AI Slop Inside](https://sladge.net/badge.svg)](https://sladge.net)
 
 AI integration workspace for the Phenotype ecosystem — LLM routing, MCP server plumbing, and embedding primitives that Phenotype agents and services compose into higher-level AI behaviors.
 
diff --git a/docs/worklogs/GOVERNANCE.md b/docs/worklogs/GOVERNANCE.md
new file mode 100644
index 0000000..58c0bf6
--- /dev/null
+++ b/docs/worklogs/GOVERNANCE.md
@@ -0,0 +1,18 @@
+# Governance Worklog
+
+### 2026-04-29 | GOVERNANCE | Sladge badge rollout
+
+**Context:** The projects-landing AI slop governance WBS is rolling the sladge
+badge into clean or isolated LLM-heavy repos where model runtime behavior is
+material.
+
+**Finding:** phenoAI is the Phenotype AI integration workspace for multi-provider
+LLM routing, MCP server plumbing, and embedding primitives.
+
+**Decision:** Add the sladge badge to the README badge block and keep the rollout
+as documentation/governance metadata only.
+
+**Impact:** phenoAI is now marked consistently with the broader LLM-heavy badge
+rollout without changing runtime code or catalog metadata.
+
+**Tags:** `[phenoAI]` `[GOVERNANCE]` `[sladge]`