CODEOWNERS

@@ -216,3 +216,19 @@ the-nexus/ @perplexity
 the-nexus/ai/ @Timmy
 timmy-home/ @perplexity
 timmy-config/ @perplexity
+# CODEOWNERS - Mandatory Review Policy
+
+# Default reviewer for all repositories
+* @perplexity
+
+# Specialized component owners
+hermes-agent/ @Timmy
+hermes-agent/agent-core/ @Rockachopa
+hermes-agent/protocol/ @Timmy
+the-nexus/ @perplexity
+the-nexus/ai/ @Timmy
+timmy-home/ @perplexity
+timmy-config/ @perplexity
+
+# Owner gates
+hermes-agent/ @Timmy

README.md

@@ -412,3 +412,23 @@ All repositories must enforce these rules on the `main` branch:
 - [x] timmy-config
 
 Last updated: 2026-04-07
+## Branch Protection & Review Policy
+
+**All repositories enforce the following rules on the `main` branch:**
+
+- ✅ Require Pull Request for merge
+- ✅ Require 1 approval
+- ✅ Dismiss stale approvals
+- ⚠️ Require CI to pass (CI runner dead - see #915)
+- ✅ Block force pushes
+- ✅ Block branch deletion
+
+**Default Reviewer:**
+- @perplexity (all repositories)
+- @Timmy (hermes-agent only)
+
+**CI Requirements:**
+- hermes-agent: Full CI enforcement
+- the-nexus: CI pending runner restoration
+- timmy-home: No CI enforcement
+- timmy-config: No CI enforcement

hermes-agent/CODEOWNERS

@@ -1 +1,3 @@
 @Timmy
+* @perplexity
+**/src @Timmy

the-nexus/CODEOWNERS

@@ -10,3 +10,4 @@ Ensure `@perplexity` is the default reviewer.
 the-nexus/CODEOWNERS
 <<<<<<< search
 @perplexity
+* @perplexity

timmy-config/CODEOWNERS

@@ -1,2 +1,3 @@
 * @perplexity
 /timmy-config/** @Timmy
+* @perplexity

timmy-home/CODEOWNERS

@@ -1,2 +1,3 @@
 @perplexity
 @perplexity
+* @perplexity