diff --git a/.github/workflows/quarantine-policy.yml b/.github/workflows/quarantine-policy.yml
new file mode 100644
index 0000000..fdf9a37
--- /dev/null
+++ b/.github/workflows/quarantine-policy.yml
@@ -0,0 +1,16 @@
+name: Package quarantine policy
+
+on:
+  pull_request:
+  merge_group:
+
+permissions:
+  contents: read
+
+jobs:
+  enforce:
+    name: Enforce package quarantine
+    if: github.repository == 'stella/stdnum'
+    permissions:
+      contents: read
+    uses: stella/.github/.github/workflows/quarantine-policy.yml@699affd63b2d956f71b9833fbed239245aff7e86
diff --git a/.github/workflows/quarantine-prune.yml b/.github/workflows/quarantine-prune.yml
new file mode 100644
index 0000000..791aebe
--- /dev/null
+++ b/.github/workflows/quarantine-prune.yml
@@ -0,0 +1,19 @@
+name: Package quarantine prune
+
+on:
+  schedule:
+    - cron: "11 * * * *"
+
+permissions:
+  contents: read
+
+jobs:
+  prune:
+    name: Remove expired quarantine exceptions
+    if: github.repository == 'stella/stdnum'
+    permissions:
+      contents: read
+    uses: stella/.github/.github/workflows/quarantine-prune.yml@699affd63b2d956f71b9833fbed239245aff7e86
+    secrets:
+      RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
+      RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/bunfig.toml b/bunfig.toml
index 523afff..a7a9ea1 100644
--- a/bunfig.toml
+++ b/bunfig.toml
@@ -3,7 +3,6 @@
 # less than 5 days ago to mitigate supply chain attacks.
 minimumReleaseAge = 432_000
 minimumReleaseAgeExcludes = [
-  "@stll/oxlint-config",
-  "@stll/typescript-config",
-  "bun-types@1.4.0", # quarantine-expires: 2026-08-25T14:11:33.785Z
+  "@stll/oxlint-config", # quarantine-excluded-since: 2026-06-03T14:49:06.000Z
+  "@stll/typescript-config", # quarantine-excluded-since: 2026-06-03T14:49:06.000Z
 ]