diff --git a/.github/codeql/codeql-config.yml b/.github/codeql/codeql-config.yml
deleted file mode 100644
index e156f73..0000000
--- a/.github/codeql/codeql-config.yml
+++ /dev/null
@@ -1,6 +0,0 @@
-name: "Cratis CodeQL config"
-
-query-filters:
-  # CA1031 is intentionally excluded from the shared baseline.
-  - exclude:
-      id: ca1031
diff --git a/README.md b/README.md
index 830ace1..7eb16ab 100644
--- a/README.md
+++ b/README.md
@@ -8,7 +8,6 @@ This repository holds the baseline every Cratis repository starts from, so conve
 
 - **AI contract** — repositories commit the Cratis AI contract instead of a synchronized corpus: `.cratis/PROJECT.md` (project context), `.cratis/ai.json` (profile subscription), and the `AGENTS.md`/`CLAUDE.md`/`GEMINI.md` bootstraps. Shared skills arrive through the Cratis AI marketplace plugins; see the [harness guide](https://www.cratis.io/ai/harnesses/).
 - **GitHub templates** — issue templates and the pull request template under [`.github/`](.github).
-- **CodeQL configuration** — the shared [CodeQL config](.github/codeql/codeql-config.yml) used for code scanning.
 - **Standard workflow wrappers** — thin caller workflows (package updates, PR artifact cleanup, deployment approval) that delegate to the reusable workflows in [Cratis/Workflows](https://github.com/Cratis/Workflows).
 
 ## Who consumes it