From d12bcaed5f65bf57bc28c443d4f8f6e29b028b5d Mon Sep 17 00:00:00 2001
From: Wasiu Bakare <wasiubakare@gmail.com>
Date: Thu, 1 Oct 2026 15:33:09 +0100
Subject: [PATCH] ci: require maintainer review on every path through
 CODEOWNERS

Branch protection on main already requires a code-owner review, but the repository had no CODEOWNERS file, so the requirement named no owner. Every path now defaults to the maintainer, matching the runtime.
---
 .github/CODEOWNERS | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 .github/CODEOWNERS

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..a6c2249
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,30 @@
+# Ori SDK (Python) — CODEOWNERS
+#
+# The SDK signs and verifies skill packages and mirrors runtime contracts.
+# Default every path to maintainer review, then keep explicit sections for
+# clarity.
+#
+# Reference:
+# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+# ── Default owner (no unowned paths) ──────────────────────────────────────────
+* @AdeGneus
+
+# ── SDK core (signing, validation, contract mirrors) ─────────────────────────
+/ori_sdk/ @AdeGneus
+/tests/ @AdeGneus
+
+# ── Build + dependency supply chain ───────────────────────────────────────────
+/pyproject.toml @AdeGneus
+/requirements*.in @AdeGneus
+/requirements*.txt @AdeGneus
+
+# ── Policy docs ───────────────────────────────────────────────────────────────
+/AGENTS.md @AdeGneus
+/PRINCIPLES.md @AdeGneus
+/README.md @AdeGneus
+/SECURITY.md @AdeGneus
+
+# ── CI / governance / automation ──────────────────────────────────────────────
+/.github/ @AdeGneus
+/scripts/ @AdeGneus