diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a562ede..21317e7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
       if: runner.os == 'Linux'
       run: |
         sudo apt-get update
-        sudo apt-get install -y libssh-dev
+        sudo apt-get install -y expect libssh-dev
 
     - name: Install dependencies (macOS)
       if: runner.os == 'macOS'
@@ -41,6 +41,9 @@ jobs:
         # Skipping anonymous access test in CI as it requires interactive pty handling which might be flaky
         # ./test_anonymous_access.sh
 
+    - name: Run release preflight
+      run: make release-check
+
     - name: Check for memory leaks
       if: runner.os == 'Linux'
       run: |
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index 73aea34..abcd841 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -32,6 +32,8 @@
   commands suggest the nearest known command when possible.
 - Added a local `make release-check` preflight for release/package validation
   without tagging, publishing, or deploying.
+- CI now installs `expect` on Ubuntu so interactive integration tests run
+  instead of being skipped, and runs `make release-check` on every push/PR.
 
 ## 2026-05-18 - Interactive input polish
 
diff --git a/docs/CICD.md b/docs/CICD.md
index 861dd6c..387dd29 100644
--- a/docs/CICD.md
+++ b/docs/CICD.md
@@ -7,6 +7,7 @@ Every push or PR automatically runs:
   - Build on Ubuntu
   - AddressSanitizer build
   - Unit and integration tests
+  - Release/package preflight (`make release-check`)
 
 Check status:
   https://github.com/m1ngsama/TNT/actions