diff --git a/CODEOWNERS b/CODEOWNERS
index 6a63b2f..acdb869 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -216,3 +216,19 @@ the-nexus/ @perplexity
 the-nexus/ai/ @Timmy
 timmy-home/ @perplexity
 timmy-config/ @perplexity
+# CODEOWNERS - Mandatory Review Policy
+
+# Default reviewer for all repositories
+* @perplexity
+
+# Specialized component owners
+hermes-agent/ @Timmy
+hermes-agent/agent-core/ @Rockachopa
+hermes-agent/protocol/ @Timmy
+the-nexus/ @perplexity
+the-nexus/ai/ @Timmy
+timmy-home/ @perplexity
+timmy-config/ @perplexity
+
+# Owner gates
+hermes-agent/ @Timmy
diff --git a/README.md b/README.md
index 7330071..6a73964 100644
--- a/README.md
+++ b/README.md
@@ -412,3 +412,23 @@ All repositories must enforce these rules on the `main` branch:
 - [x] timmy-config
 
 Last updated: 2026-04-07
+## Branch Protection & Review Policy
+
+**All repositories enforce the following rules on the `main` branch:**
+
+- ✅ Require Pull Request for merge
+- ✅ Require 1 approval
+- ✅ Dismiss stale approvals
+- ⚠️ Require CI to pass (CI runner dead - see #915)
+- ✅ Block force pushes
+- ✅ Block branch deletion
+
+**Default Reviewer:**
+- @perplexity (all repositories)
+- @Timmy (hermes-agent only)
+
+**CI Requirements:**
+- hermes-agent: Full CI enforcement
+- the-nexus: CI pending runner restoration
+- timmy-home: No CI enforcement
+- timmy-config: No CI enforcement
diff --git a/hermes-agent/CODEOWNERS b/hermes-agent/CODEOWNERS
index 33278c4..f895025 100644
--- a/hermes-agent/CODEOWNERS
+++ b/hermes-agent/CODEOWNERS
@@ -1 +1,3 @@
 @Timmy
+* @perplexity
+**/src @Timmy
diff --git a/the-nexus/CODEOWNERS b/the-nexus/CODEOWNERS
index caa41a4..1f25bca 100644
--- a/the-nexus/CODEOWNERS
+++ b/the-nexus/CODEOWNERS
@@ -10,3 +10,4 @@ Ensure `@perplexity` is the default reviewer.
 the-nexus/CODEOWNERS
 <<<<<<< search
 @perplexity
+* @perplexity
diff --git a/timmy-config/CODEOWNERS b/timmy-config/CODEOWNERS
index 80981bc..b2364ac 100644
--- a/timmy-config/CODEOWNERS
+++ b/timmy-config/CODEOWNERS
@@ -1,2 +1,3 @@
 * @perplexity
 /timmy-config/** @Timmy
+* @perplexity
diff --git a/timmy-home/CODEOWNERS b/timmy-home/CODEOWNERS
index b649461..13f4b97 100644
--- a/timmy-home/CODEOWNERS
+++ b/timmy-home/CODEOWNERS
@@ -1,2 +1,3 @@
 @perplexity
 @perplexity
+* @perplexity