# Code owners: a change under a listed path needs the owner's review before it can merge.
# Enforced server-side by required_pull_request_reviews.require_code_owner_reviews in
# scripts/setup-branch-protection.sh — without that flag this file is only advisory.
* @your-team
.github/ @your-team
# Security-critical paths get mandatory owner review, called out explicitly so they survive
# even if the catch-all above is ever narrowed: database migrations (they carry the RLS
# policies and schema) and the shared UI primitives.
db/migrations/ @your-team
src/components/ui/ @your-team
