CODEOWNERS

# Narrow CODEOWNERS — security backstop only.
# Author picks reviewers for everything else.

/client/templates/                                      @saadqbal
/client/values.schema.json                              @saadqbal
/client/values.yaml                                     @saadqbal
/docs/SECURITY.md                                       @saadqbal

# ── R8 signed-installer trust root (RFC-0001 / tracebloc/backend#889, client#282/#283) ──
# The signed-install bootstraps — install.sh (curl|bash) and install.ps1 (irm|iex) —
# run the latest signed release's sub-scripts only after cosign-verifying them against
# a signed manifest. The keyless signer identity IS the release workflow — so a change
# to the workflow, either installer, their sub-scripts, or the manifest generator
# changes *what gets trusted*, and must be code-owner reviewed.
/.github/workflows/release-helm-chart.yaml              @saadqbal
/scripts/install.sh                                     @saadqbal
/scripts/install.ps1                                    @saadqbal
/scripts/install-k8s.sh                                 @saadqbal
/scripts/install-k8s.ps1                                @saadqbal
/scripts/gen-manifest.sh                                @saadqbal
/scripts/manifest.sha256                                @saadqbal
/scripts/lib/                                           @saadqbal

# ── Style-system enforcement (STYLE.md) ──
# The guard + the style definition decide what output regressions CI blocks; a
# change here changes the rules themselves, so it must be code-owner reviewed.
/scripts/check-style.sh                                 @saadqbal
/STYLE.md                                               @saadqbal