Proposal
Create an organization team with at least two eligible policy reviewers, grant the minimum repository permission required, update .github/CODEOWNERS, and then require one CODEOWNER approval for policy-critical changes.
Why deferred
The frozen issue run can document continuity roles and PR controls, but selecting backup organization members and changing review enforcement requires an explicit organization-owner decision.
Acceptance criteria
- A dedicated reviewer team has at least two active members.
- Policy-critical CODEOWNERS entries reference the team.
- Main protection requires one CODEOWNER approval without creating a self-review deadlock.
- A documented break-glass process exists.
Deferred: Outside frozen run scope and requires organization-owner membership decisions
This proposal was discovered during the frozen public-issue run and is intentionally excluded from implementation in that run.
Proposal
Create an organization team with at least two eligible policy reviewers, grant the minimum repository permission required, update
.github/CODEOWNERS, and then require one CODEOWNER approval for policy-critical changes.Why deferred
The frozen issue run can document continuity roles and PR controls, but selecting backup organization members and changing review enforcement requires an explicit organization-owner decision.
Acceptance criteria
Deferred: Outside frozen run scope and requires organization-owner membership decisions
This proposal was discovered during the frozen public-issue run and is intentionally excluded from implementation in that run.