diff --git a/.gitea/branch-protection.yml b/.gitea/branch-protection.yml
index a7714ee..635a1a9 100644
--- a/.gitea/branch-protection.yml
+++ b/.gitea/branch-protection.yml
@@ -1,39 +1,34 @@
-# Gitea branch protection configuration
-# Apply to main branch across all repositories
+# Branch Protection Rules for Main Branch
+branch: main
+rules:
+  require_pull_request: true
+  required_approvals: 1
+  dismiss_stale_reviews: true
+  require_ci_to_pass: true
+  block_force_pushes: true
+  block_deletions: true
+>>>>>>> replace
+```
 
-repos:
-  hermes-agent:
-    branch_protection:
-      require_pull_request: true
-      required_approvals: 1
-      dismiss_stale_reviews: true
-      require_ci_to_pass: true
-      block_force_push: true
-      block_deletion: true
+CODEOWNERS
+```txt
+<<<<<<< search
+# CODEOWNERS - Mandatory Review Policy
 
-  the-nexus:
-    branch_protection:
-      require_pull_request: true
-      required_approvals: 1
-      dismiss_stale_reviews: true
-      require_ci_to_pass: false # CI runner dead per #915
-      block_force_push: true
-      block_deletion: true
+# Default reviewer for all repositories
+* @perplexity
 
-  timmy-home:
-    branch_protection:
-      require_pull_request: true
-      required_approvals: 1
-      dismiss_stale_reviews: true
-      require_ci_to_pass: false # No CI configured
-      block_force_push: true
-      block_deletion: true
+# Specialized component owners
+hermes-agent/ @Timmy
+hermes-agent/agent-core/ @Rockachopa
+hermes-agent/protocol/ @Timmy
+the-nexus/ @perplexity
+the-nexus/ai/ @Timmy
+timmy-home/ @perplexity
+timmy-config/ @perplexity
 
-  timmy-config:
-    branch_protection:
-      require_pull_request: true
-      required_approvals: 1
-      dismiss_stale_reviews: true
-      require_ci_to_pass: false # Limited CI
-      block_force_push: true
-      block_deletion: true
+# Owner gates
+hermes-agent/ @Timmy
+
+# QA reviewer for all PRs
+* @perplexity