diff --git a/Makefile b/Makefile
index 045a731..9629771 100644
--- a/Makefile
+++ b/Makefile
@@ -18,9 +18,32 @@ help: ## Show this help
 	  | awk 'BEGIN{FS=":.*?## "}{printf "  \033[36m%-14s\033[0m %s\n", $$1, $$2}'
 
 .PHONY: setup
-setup: ## Create the venv and install dependencies
+setup: ## Create the venv, install dependencies, and prove the result works
 	$(PYTHON) -m venv .venv
-	$(VENV)/bin/pip install -r requirements.txt
+	# requirements-dev.txt pulls in requirements.txt via -r, so this is still
+	# the full runtime set plus pytest/ruff. Installing only requirements.txt
+	# here (as this line originally did) left `make test` and `make lint`
+	# unreachable from a clean `make setup` since the Makefile's introduction
+	# in b9f55cb — pytest was never installed by setup at all. Found by the
+	# check below failing on its first clean-tree run; fixed in the same
+	# commit rather than filed separately, since the new check cannot pass
+	# honestly against the old line.
+	$(VENV)/bin/pip install -r requirements-dev.txt
+	# Exit 0 from pip install is not evidence (D-24) — it is the same exit code
+	# whether requirements.txt matches what's on disk or a dependency silently
+	# failed to install. Two cheap checks, for two different drift modes:
+	#   pip check         - installed packages satisfy each other's declared
+	#                        version constraints (a stale/partial install).
+	#   pytest --collect-only - every test module actually imports, which
+	#                        walks the full src/ import graph and is exactly
+	#                        what catches a *missing* declared dependency
+	#                        (core-api's sqlalchemy case in T-47). It builds
+	#                        no client and opens no socket - dependencies.py
+	#                        wraps client construction in lru_cache getters,
+	#                        never called at collection time - so this needs
+	#                        none of the five backing services running.
+	$(VENV)/bin/pip check
+	$(VENV)/bin/python -m pytest tests/ --collect-only -q
 
 .PHONY: run
 run: ## Dev server on :8778 with reload (8089 is the container, not this)