diff --git a/.github/wiki b/.github/wiki
index 260749a..9cd0995 160000
--- a/.github/wiki
+++ b/.github/wiki
@@ -1 +1 @@
-Subproject commit 260749a37590db3e0f609e3ee72dd6f511c66cff
+Subproject commit 9cd09953e08f2c6fd22bb8aa00349c8014d63850
diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index 2490ecb..48e7a1e 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -29,8 +29,10 @@ on:
         default: release/v
 
 permissions:
+  actions: write
   contents: write
   pull-requests: write
+  repository-projects: write
 
 jobs:
   changelog:
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index d9b5d53..bff4e9e 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -2,6 +2,11 @@ name: "Fast Forward Test Suite"
 
 on:
   push:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
   workflow_dispatch:
     inputs:
       max-outdated:
@@ -9,13 +14,20 @@ on:
         required: false
         type: number
         default: -1
+      publish-required-statuses:
+        description: Mirror required test matrix checks as commit statuses for workflow-dispatched runs.
+        required: false
+        type: boolean
+        default: false
 
 permissions:
   contents: read
+  statuses: write
 
 jobs:
   tests:
     uses: php-fast-forward/dev-tools/.github/workflows/tests.yml@main
     with:
       max-outdated: ${{ inputs.max-outdated || -1 }}
+      publish-required-statuses: ${{ inputs.publish-required-statuses || false }}
     secrets: inherit
diff --git a/.github/workflows/wiki.yml b/.github/workflows/wiki.yml
index d54c27a..cdf2726 100644
--- a/.github/workflows/wiki.yml
+++ b/.github/workflows/wiki.yml
@@ -5,6 +5,7 @@ on:
     types: [opened, synchronize, reopened]
 
 permissions:
+  actions: write
   contents: write
   pull-requests: read
 
@@ -15,6 +16,7 @@ concurrency:
 jobs:
   preview:
     permissions:
+      actions: write
       contents: write
       pull-requests: read
     # Pull-request wiki previews live here. Publication and preview cleanup are
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e84f7fa..b4434a0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,3 +14,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 - Restore catalog and domain enum coverage so CI dependency and coverage gates pass.
+- Update DevTools workflow wrappers so changelog releases and wiki-triggered test validation receive the permissions and triggers required by the shared automation (#3).