diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 28e834e9..d397977c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -207,6 +207,18 @@ jobs:
         with:
           name: screenshots-${{ matrix.capybara-driver }}-${{ matrix.screenshot-driver }}
 
+  ci-gate:
+    name: CI Gate
+    # One check name for branch protection. Cell names carry their ruby and
+    # gemfile, so a rule listing them stops requiring anything the moment the
+    # matrix changes shape. `skipped` passes -- the matrix is off on PRs.
+    if: always()
+    needs: [ test-minimal-setup, functional-test, matrix, matrix-screenshot-driver ]
+    runs-on: ubuntu-latest
+    steps:
+      - if: contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled')
+        run: exit 1
+
   test-report-upload:
     name: Test Report Upload
     if: github.event_name == 'workflow_dispatch'