CODEOWNERS

@@ -0,0 +1,14 @@
+# CODEOWNERS file for repository review policies
+# Format: <path> <reviewer>
+
+# Default reviewer for all repositories
+* @perplexity
+
+# Special reviewers for specific repos
+nexus/ @Timmy
+hermes-agent/ @Timmy
+timmy-home/ @Timmy
+timmy-config/ @Timmy
+
+# QA reviewer for all PRs
+* @perplexity

README.md

@@ -87,6 +87,21 @@ Those pieces should be carried forward only if they serve the mission and are re
 There is no root browser app on current `main`.
 Do not tell people to static-serve the repo root and expect a world.
 
+### Branch Protection & Review Policy
+
+**All repositories enforce:**
+- PRs required for all changes
+- Minimum 1 approval required
+- CI/CD must pass
+- No force pushes
+- No direct pushes to main
+
+**Default reviewers:**
+- `@perplexity` for all repositories
+- `@Timmy` for nexus/ and hermes-agent/
+
+**Enforced by Gitea branch protection rules**
+
 ### What you can run now
 
 - `python3 server.py` for the local websocket bridge