.github/BRANCH_PROTECTION.md

@@ -0,0 +1,42 @@
+# Branch Protection Policy for Timmy Foundation
+
+## Enforced Rules for All Repositories
+
+All repositories must enforce these rules on the `main` branch:
+
+| Rule | Status | Rationale |
+|------|--------|-----------|
+| Require PR for merge | ✅ Enabled | Prevent direct commits |
+| Required approvals | 1+ | Minimum review threshold |
+| Dismiss stale approvals | ✅ Enabled | Re-review after new commits |
+| Require CI to pass | ⚠ Conditional | Only where CI exists |
+| Block force push | ✅ Enabled | Protect commit history |
+| Block branch deletion | ✅ Enabled | Prevent accidental deletion |
+
+## Default Reviewer Assignments
+
+- **All repositories**: @perplexity (QA gate)
+- **hermes-agent**: @Timmy (owner gate)
+- **Specialized areas**: Repo-specific owners for domain expertise
+
+## CI Enforcement Status
+
+| Repository | CI Status | Notes |
+|------------|-----------|-------|
+| hermes-agent | ✅ Active | Full CI enforcement |
+| the-nexus | ⚠ Pending | CI runner dead (#915) |
+| timmy-home | ❌ Disabled | No CI configured |
+| timmy-config | ❌ Disabled | Limited CI |
+
+## Implementation Requirements
+
+1. All repositories must have:
+   - [x] Branch protection enabled
+   - [x] @perplexity set as default reviewer
+   - [x] This policy documented in README
+
+2. Special requirements:
+   - [ ] CI runner restored for the-nexus (#915)
+   - [ ] Full CI implementation for all repos
+
+Last updated: 2026-04-07

hermes-agent/CONTRIBUTING.md

@@ -0,0 +1,18 @@
+# Contribution Policy for hermes-agent
+
+## Branch Protection Rules
+All changes to the `main` branch require:
+- Pull Request with at least 1 approval
+- CI checks passing
+- No direct commits or force pushes
+- No deletion of the main branch
+
+## Review Requirements
+- All PRs must be reviewed by @perplexity
+- Additional review required from @Timmy
+
+## Stale PR Policy
+- Stale approvals are dismissed on new commits
+- Abandoned PRs will be closed after 7 days of inactivity
+
+For urgent fixes, create a hotfix branch and follow the same review process.

the-nexus/CONTRIBUTING.md

@@ -0,0 +1,17 @@
+# Contribution Policy for the-nexus
+
+## Branch Protection Rules
+All changes to the `main` branch require:
+- Pull Request with at least 1 approval
+- CI checks passing (when available)
+- No direct commits or force pushes
+- No deletion of the main branch
+
+## Review Requirements
+- All PRs must be reviewed by @perplexity
+
+## Stale PR Policy
+- Stale approvals are dismissed on new commits
+- Abandoned PRs will be closed after 7 days of inactivity
+
+For urgent fixes, create a hotfix branch and follow the same review process.

timmy-config/CONTRIBUTING.md

@@ -0,0 +1,17 @@
+# Contribution Policy for timmy-config
+
+## Branch Protection Rules
+All changes to the `main` branch require:
+- Pull Request with at least 1 approval
+- Limited CI checks (when available)
+- No direct commits or force pushes
+- No deletion of the main branch
+
+## Review Requirements
+- All PRs must be reviewed by @perplexity
+
+## Stale PR Policy
+- Stale approvals are dismissed on new commits
+- Abandoned PRs will be closed after 7 days of inactivity
+
+For urgent fixes, create a hotfix branch and follow the same review process.

timmy-home/CONTRIBUTING.md

@@ -0,0 +1,16 @@
+# Contribution Policy for timmy-home
+
+## Branch Protection Rules
+All changes to the `main` branch require:
+- Pull Request with at least 1 approval
+- No direct commits or force pushes
+- No deletion of the main branch
+
+## Review Requirements
+- All PRs must be reviewed by @perplexity
+
+## Stale PR Policy
+- Stale approvals are dismissed on new commits
+- Abandoned PRs will be closed after 7 days of inactivity
+
+For urgent fixes, create a hotfix branch and follow the same review process.