CODEOWNERS

# Require owner review for files that control CI
# behavior, execute as privileged release tooling, or
# assert the project's supply-chain / security posture.
/.github/CODEOWNERS                       @jeduden
/.github/workflows/                       @jeduden
/.github/actions/                         @jeduden
/cmd/mdsmith-release/                     @jeduden
/internal/release/                        @jeduden
/demo.tape                                @jeduden
/SECURITY.md                              @jeduden
/docs/development/release.md              @jeduden
/docs/development/release-tooling.md      @jeduden
/docs/development/secret-rotations.md     @jeduden
/docs/security/                           @jeduden
# Every published manifest — npm-lifecycle-guard
# checks these in CI, but CODEOWNERS adds a human
# gate before any lifecycle-script change can merge.
/npm/**/package.json                      @jeduden
/editors/**/package.json                  @jeduden