# All changes need review from the maintainer before merge.
# Only code-owner approvals count toward the required review on main.
* @guillaumemeyer

# Security-sensitive surface stays explicitly with the maintainer:
# CI/CD workflows, dependency automation, and the security policy.
/.github/ @guillaumemeyer
SECURITY.md @guillaumemeyer
