feat: [QA][POLICY] Branch Protection + Mandatory Review Policy for All Repos (#918)

Refs #918
Agent: groq

.gitea/branch-protection.yml

@@ -32,3 +32,24 @@ hermes-agent/ @Timmy
 
 # QA reviewer for all PRs
 * @perplexity
+# Branch protection rules for main branch
+branch: main
+rules:
+  - type: push
+    # Push protection rules
+    required_pull_request_reviews: true
+    required_status_checks: true
+    # CI is disabled for the-nexus per #915
+    required_approving_review_count: 1
+    block_force_pushes: true
+    block_deletions: true
+
+  - type: merge  # Merge protection rules
+    required_pull_request_reviews: true
+    required_status_checks: true
+    required_approving_review_count: 1
+    dismiss_stale_reviews: true
+    require_code_owner_reviews: true
+    required_status_check_contexts:
+      - "ci/ci"
+      - "ci/qa"

CODEOWNERS

@@ -203,3 +203,16 @@ timmy-config/ @perplexity
 
 # Owner gates
 hermes-agent/ @Timmy
+# CODEOWNERS - Mandatory Review Policy
+
+# Default reviewer for all repositories
+* @perplexity
+
+# Specialized component owners
+hermes-agent/ @Timmy
+hermes-agent/agent-core/ @Rockachopa
+hermes-agent/protocol/ @Timmy
+the-nexus/ @perplexity
+the-nexus/ai/ @Timmy
+timmy-home/ @perplexity
+timmy-config/ @perplexity

index.html

@@ -247,7 +247,7 @@
     Created with Perplexity Computer
   </a>
   <a href="POLICY.md" target="_blank" rel="noopener noreferrer">
-    View Branch Protection Policy
+    View Contribution Policy
   </a>
 </footer>