CODEOWNERS

# Sensitive paths require review from the ndx team. The smoke-test-deploy
# environment's branch policy auto-approves refs/heads/main; PRs touching any
# of these paths can't run with deploy credentials until a CODEOWNERS
# reviewer signs off.

# Smoke pack
/.github/workflows/smoke.yml         @co-cddo/ndx
/scripts/smoke*.sh                   @co-cddo/ndx
/scripts/check-quarantines.mjs       @co-cddo/ndx
/tests/smoke/**                      @co-cddo/ndx

# Smoke account state
/docs/smoke-test-account-setup.md    @co-cddo/ndx
/docs/smoke-test-account-config.yml  @co-cddo/ndx

# Renovate (guarded so config drift can't self-merge)
/renovate.json                       @co-cddo/ndx
/.github/workflows/renovate.yml      @co-cddo/ndx

# Retention-policy lint (guarded against accidental loosening)
/scripts/lint-retention-policies.sh  @co-cddo/ndx