diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c2cdbffc5c97..7737e88d2475 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2220,6 +2220,9 @@ jobs:
           - check_name: check-sqlite-session-schema-baseline
             group: sqlite-session-schema-baseline
             runner: blacksmith-4vcpu-ubuntu-2404
+          - check_name: check-plugin-sdk-api-baseline
+            group: plugin-sdk-api-baseline
+            runner: blacksmith-4vcpu-ubuntu-2404
           - check_name: check-sqlite-session-flip-proof
             group: sqlite-session-flip-proof
             runner: blacksmith-8vcpu-ubuntu-2404
@@ -2439,6 +2442,9 @@ jobs:
                 run_check "sqlite:sessions-schema:check" pnpm run sqlite:sessions-schema:check
               fi
               ;;
+            plugin-sdk-api-baseline)
+              run_check "plugin-sdk:api:check" pnpm run plugin-sdk:api:check
+              ;;
             sqlite-session-flip-proof)
               if [ ! -f test/scripts/sqlite-sessions-transcripts-flip-proof.e2e.test.ts ]; then
                 echo "[skip] SQLite sessions/transcripts flip proof is not present in this checkout"
diff --git a/docs/.generated/plugin-sdk-api-baseline.sha256 b/docs/.generated/plugin-sdk-api-baseline.sha256
index d8dad6155042..9c8aa6cdb7a2 100644
--- a/docs/.generated/plugin-sdk-api-baseline.sha256
+++ b/docs/.generated/plugin-sdk-api-baseline.sha256
@@ -136,7 +136,7 @@ e1b72e4c2d926d39d216df80775e0a5f44705d04f5040c01fe1043ad7a2c2fe4  module/heartbe
 21a233e9008f0701df1efbefe521a9ced45c61da6e297e788bdd86895d793128  module/image-generation-runtime
 f6e3c44e7d1090a97aca554a3c247219b8de78b3cb4399cac5efde8a0a6c1156  module/inbound-envelope
 d3102bd433eea32ca2a761030788fe18294aa34266f2fb2d01d74268cbf8fb54  module/inbound-reply-dispatch
-30b0b311f2488a12bdfb3eceb70a14327c9dfa2833519f24666141a734f9e7d1  module/infra-runtime
+c1826ee55763f9c1f86e873cda221bdf32122fce5f5a5a46c384521a8ec8bf6c  module/infra-runtime
 2e717cccb3db127aed0287d4ea14c41a8e64e46d60c728638153e31e2fb0d296  module/ingress-effect-once
 3d0431e2575abf67c7fd9e9763b08b7a46018e01c290ffea8d4af9874d3c3fc4  module/inline-image-data-url-runtime
 74fee62a94618d830a5282a7816a73b85570b2e4ce17b90078078734510511d7  module/interactive-runtime
diff --git a/test/scripts/ci-workflow-guards.test.ts b/test/scripts/ci-workflow-guards.test.ts
index ee858374bdcd..9dc11419fd4f 100644
--- a/test/scripts/ci-workflow-guards.test.ts
+++ b/test/scripts/ci-workflow-guards.test.ts
@@ -2923,6 +2923,23 @@ describe("ci workflow guards", () => {
     );
   });
 
+  it("runs the Plugin SDK API baseline as a visible additional check", () => {
+    const workflow = readCiWorkflow();
+    const additionalJob = workflow.jobs["check-additional-shard"];
+    const matrixRows = additionalJob.strategy.matrix.include;
+    expect(matrixRows).toContainEqual({
+      check_name: "check-plugin-sdk-api-baseline",
+      group: "plugin-sdk-api-baseline",
+      runner: "blacksmith-4vcpu-ubuntu-2404",
+    });
+
+    const runStep = additionalJob.steps.find(
+      (step: WorkflowStep) => step.name === "Run additional check shard",
+    );
+    expect(runStep.run).toContain("plugin-sdk-api-baseline)");
+    expect(runStep.run).toContain('run_check "plugin-sdk:api:check" pnpm run plugin-sdk:api:check');
+  });
+
   it("runs the SQLite transaction ratchet in the session boundary check", () => {
     const workflow = readCiWorkflow();
     const additionalJob = workflow.jobs["check-additional-shard"];