diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 815e795..34322d3 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -13,8 +13,8 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
-      - name: Install test dependency
-        run: python -m pip install send2trash
+      - name: Install Python requirements
+        run: python -m pip install -r requirements.txt
       - name: Checkpoint 0 safety baseline
         run: python -m unittest -v checkpoint0_tests/test_recorder_safety_baseline.py
       - name: Checkpoint 1 and 2 regression suite
diff --git a/README.md b/README.md
index 64ba013..e2ac4f0 100644
--- a/README.md
+++ b/README.md
@@ -270,6 +270,9 @@ recorder_runtime/
     Identity registry, worker status, runtime paths,
     launch contracts, sound state, and terminal hosting.
 
+requirements.txt
+    Pinned Python runtime dependencies used by local setup and CI.
+
 tests/
 checkpoint0_tests/
     Regression and safety coverage.
@@ -339,6 +342,8 @@ These optional local sound assets are not included in the repository.
 
 ## Testing and CI
 
+Python dependencies are installed from `requirements.txt`.
+
 GitHub Actions runs the regression suite on pushes to `main` and `dev`, and on pull requests.
 
 ```bash
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..ed59e87
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1 @@
+Send2Trash==2.1.0