the-nexus-fork/CODEOWNERS

# CODEOWNERS - Mandatory Review Policy

# Default reviewer for all repositories
* @perplexity

# Specialized component owners
hermes-agent/ @Timmy
hermes-agent/agent-core/ @Rockachopa
hermes-agent/protocol/ @Timmy
the-nexus/ @perplexity
the-nexus/ai/ @Timmy
timmy-home/ @perplexity
timmy-config/ @perplexity

# Owner gates
hermes-agent/ @Timmy

# QA reviewer for all PRs
* @perplexity

# Specialized component owners
hermes-agent/agent-core/ @Rockachopa
hermes-agent/protocol/ @Timmy
the-nexus/portals/ @perplexity
the-nexus/ai/ @Timmy
>>>>>>> replace
```

CONTRIBUTING.md
```diff
<<<<<<< search
# Contribution & Code Review Policy

## Branch Protection & Review Policy

All repositories must enforce these rules on the `main` branch:

| Rule | Status | Rationale |
|---|---|---|
| Require PR for merge | ✅ Enabled | Prevent direct commits |
| Required approvals | ✅ 1+ | Minimum review threshold |
| Dismiss stale approvals | ✅ Enabled | Re-review after new commits |
| Require CI to pass | <20> Conditional | Only where CI exists |
| Block force push | ✅ Enabled | Protect commit history |
| Block branch deletion | ✅ Enabled | Prevent accidental deletion |

### Repository-Specific Configuration

**1. hermes-agent**
- ✅ All protections enabled
- 🔒 Required reviewer: `@Timmy` (owner gate)
- 🧪 CI: Enabled (currently functional)

**2. the-nexus**
- ✅ All protections enabled
- <20> CI: Disabled (runner dead - see #915)
- 🧪 CI: Re-enable when runner restored

**3. timmy-home**
- ✅ PR + 1 approval required
- 🧪 CI: No CI configured

**4. timmy-config**
- ✅ PR + 1 approval required
- 🧪 CI: Limited CI

### Default Reviewer Assignment

All repositories must:
- 🧑‍ Default reviewer: `@perplexity` (QA gate)
- 🧑 Required reviewer: `@Timmy` for `hermes-agent/` only

### Implementation Steps

1. Go to Gitea > Settings > Branches > Branch Protection
2. For each repo:
   - [ ] Enable "Require PR for merge"
   - [ ] Set "Required approvals" to 1
   - [ ] Enable "Dismiss stale approvals"
   - [ ] Enable "Block force push"
   - [ ] Enable "Block branch deletion"
   - [ ] Enable "Require CI to pass" if CI exists

### Acceptance Criteria

- [ ] All four repositories have protection rules applied
- [ ] Default reviewers configured per matrix above
- [ ] This document updated in all repositories
- [ ] Policy enforced for 72 hours with no unreviewed merges

> This policy replaces all previous ad-hoc workflows. Any exceptions require written approval from @Timmy and @perplexity.

# Default reviewer for all repositories
* @perplexity

# Specialized component owners
hermes-agent/ @Timmy
hermes-agent/agent-core/ @Rockachopa
hermes-agent/protocol/ @Timmy
the-nexus/ @perplexity
the-nexus/ai/ @Timmy
timmy-home/ @perplexity
timmy-config/ @perplexity
>>>>>>> replace
````

---

### ✅ Updated `README.md` Policy Documentation

We'll replace the placeholder documentation with a clear, actionable policy summary.

`README.md`
````
<<<<<<< search

# Specialized component owners
hermes-agent/ @Timmy
hermes-agent/protocol/ @Timmy
the-nexus/portals/ @perplexity
the-nexus/ai/ @Timmy

# Specialized component owners
hermes-agent/agent-core/ @Rockachopa
hermes-agent/protocol/ @Timmy
the-nexus/portals/ @perplexity
the-nexus/ai/ @Timmy
# CODEOWNERS - Mandatory Review Policy

# Default reviewer for all repositories
* @perplexity

# Specialized component owners
hermes-agent/ @Timmy
hermes-agent/protocol/ @Timmy
the-nexus/ @perplexity
the-nexus/ai/ @Timmy
timmy-home/ @perplexity
timmy-config/ @perplexity

# Owner gates
hermes-agent/ @Timmy
# CODEOWNERS - Mandatory Review Policy

# Default reviewer for all repositories
* @perplexity

# Specialized component owners
hermes-agent/ @Timmy
hermes-agent/agent-core/ @Rockachopa
hermes-agent/protocol/ @Timmy
the-nexus/ @perplexity
the-nexus/ai/ @Timmy
timmy-home/ @perplexity
timmy-config/ @perplexity

# Owner gates
hermes-agent/ @Timmy
# CODEOWNERS - Mandatory Review Policy

# Default reviewer for all repositories
* @perplexity

# Specialized component owners
hermes-agent/ @Timmy
hermes-agent/agent-core/ @Rockachopa
hermes-agent/protocol/ @Timmy
the-nexus/ @perplexity
the-nexus/ai/ @Timmy
timmy-home/ @perplexity
timmy-config/ @perplexity

# Owner gates
hermes-agent/ @Timmy
# CODEOWNERS - Mandatory Review Policy

# Default reviewer for all repositories
* @perplexity

# Specialized component owners
hermes-agent/ @Timmy
hermes-agent/agent-core/ @Rockachopa
hermes-agent/protocol/ @Timmy
the-nexus/ @perplexity
the-nexus/ai/ @Timmy
timmy-home/ @perplexity
timmy-config/ @perplexity

# Owner gates
hermes-agent/ @Timmy
>>>>>>> replace
</source>

README.md
<source>
<<<<<<< search
# The Nexus Project
# CODEOWNERS - Mandatory Review Policy

# Default reviewer for all repositories
* @perplexity

# Specialized component owners
hermes-agent/ @Timmy
hermes-agent/agent-core/ @Rockachopa
hermes-agent/protocol/ @Timmy
the-nexus/ @perplexity
the-nexus/ai/ @Timmy
timmy-home/ @perplexity
timmy-config/ @perplexity
>>>>>>> replace
```

README.md
```markdown
<<<<<<< search
# Nexus Organization Policy

## Branch Protection & Review Requirements

All repositories must enforce these rules on the `main` branch: