# CODEOWNERS — Aegis
#
# This file routes pull-request reviews to the maintainers responsible for
# each high-trust path. Every line in this file is a glob followed by one or
# more GitHub usernames or teams. The LAST matching line wins.
#
# See https://docs.github.com/en/repositories/managing-your-repositories-settings-and-customizations/customizing-your-repository/about-code-owners
#
# Default owners — touched if no more specific rule below matches.
*                                       @w2sg-arnav @snehajain1011

# -----------------------------------------------------------------------------
# CI, release, and supply-chain trust
# -----------------------------------------------------------------------------
/.github/                               @w2sg-arnav @snehajain1011
/.github/workflows/                     @w2sg-arnav @snehajain1011
/.github/CODEOWNERS                     @w2sg-arnav @snehajain1011
/.github/dependabot.yml                 @w2sg-arnav @snehajain1011
/.pre-commit-config.yaml                @w2sg-arnav @snehajain1011
/Dockerfile                             @w2sg-arnav @snehajain1011
/docker-compose.yml                     @w2sg-arnav @snehajain1011
/Makefile                               @w2sg-arnav @snehajain1011
/pyproject.toml                         @w2sg-arnav @snehajain1011
/uv.lock                                @w2sg-arnav @snehajain1011
/package.json                           @w2sg-arnav @snehajain1011
/package-lock.json                      @w2sg-arnav @snehajain1011

# -----------------------------------------------------------------------------
# Public trust documents — must stay aligned with runtime truth
# -----------------------------------------------------------------------------
/SECURITY.md                            @w2sg-arnav @snehajain1011
/LICENSE                                @w2sg-arnav @snehajain1011
/CODE_OF_CONDUCT.md                     @w2sg-arnav @snehajain1011
/GOVERNANCE.md                          @w2sg-arnav @snehajain1011
/MAINTAINERS.md                         @w2sg-arnav @snehajain1011
/CONTRIBUTING.md                        @w2sg-arnav @snehajain1011
/README.md                              @w2sg-arnav @snehajain1011
/CHANGELOG.md                           @w2sg-arnav @snehajain1011
/CITATION.cff                           @w2sg-arnav @snehajain1011
/SUPPORT.md                             @w2sg-arnav @snehajain1011
/docs/                                  @w2sg-arnav @snehajain1011
/docs/launch-readiness.md               @w2sg-arnav @snehajain1011
/docs/launch-gap-audit.md               @w2sg-arnav @snehajain1011
/docs/launch-scorecard.md               @w2sg-arnav @snehajain1011
/docs/best-in-class-component-scorecard.md  @w2sg-arnav @snehajain1011
/docs/security-model.md                 @w2sg-arnav @snehajain1011
/docs/open-core-boundary.md             @w2sg-arnav @snehajain1011
/docs/open-source-release.md            @w2sg-arnav @snehajain1011
/docs/releasing.md                      @w2sg-arnav @snehajain1011

# -----------------------------------------------------------------------------
# API + auth + settings — every change here is security-sensitive
# -----------------------------------------------------------------------------
/src/aegis/api/                         @w2sg-arnav @snehajain1011
/src/aegis/api/app.py                   @w2sg-arnav @snehajain1011
/src/aegis/api/auth.py                  @w2sg-arnav @snehajain1011
/src/aegis/api/auth_service.py          @w2sg-arnav @snehajain1011
/src/aegis/api/authz.py                 @w2sg-arnav @snehajain1011
/src/aegis/api/billing.py               @w2sg-arnav @snehajain1011
/src/aegis/api/middleware.py            @w2sg-arnav @snehajain1011
/src/aegis/api/rate_limit.py            @w2sg-arnav @snehajain1011
/src/aegis/api/routes/                  @w2sg-arnav @snehajain1011
/src/aegis/api/routes/memory.py         @w2sg-arnav @snehajain1011
/src/aegis/api/routes/auth.py           @w2sg-arnav @snehajain1011
/src/aegis/core/settings.py             @w2sg-arnav @snehajain1011
/src/aegis/core/                        @w2sg-arnav @snehajain1011
/src/aegis/security/                    @w2sg-arnav @snehajain1011

# -----------------------------------------------------------------------------
# Persistence and data backends
# -----------------------------------------------------------------------------
/src/aegis/store/                       @w2sg-arnav @snehajain1011
/src/aegis/memory/backends/             @w2sg-arnav @snehajain1011
/alembic/                               @w2sg-arnav @snehajain1011
/alembic.ini                            @w2sg-arnav @snehajain1011

# -----------------------------------------------------------------------------
# Public web stack (marketing site, dashboard, auth UX)
# -----------------------------------------------------------------------------
/apps/                                  @w2sg-arnav @snehajain1011
/apps/dashboard/                        @w2sg-arnav @snehajain1011
/apps/dashboard/next.config.ts          @w2sg-arnav @snehajain1011
/apps/dashboard/src/lib/auth.tsx        @w2sg-arnav @snehajain1011
/apps/dashboard/src/lib/api.ts          @w2sg-arnav @snehajain1011
/apps/site/                             @w2sg-arnav @snehajain1011
/apps/site/next.config.ts               @w2sg-arnav @snehajain1011

# -----------------------------------------------------------------------------
# Strict launch / release tooling and infra scripts
# -----------------------------------------------------------------------------
/scripts/                               @w2sg-arnav @snehajain1011
/infra/                                 @w2sg-arnav @snehajain1011
/configs/                               @w2sg-arnav @snehajain1011
/benchmarks/                            @w2sg-arnav @snehajain1011
/sdk/                                   @w2sg-arnav @snehajain1011
