CODEOWNERS

# Soundness-critical result comparators and plan parsers require owner review.
# Mirrors _project/scripts/auto_merge_soundness_paths.py:SOUNDNESS_PREFIXES
# 1:1 -- keep these two files in lockstep (pinned by
# tests/unit/test_auto_merge_soundness_paths.py::test_codeowners_covers_soundness_paths).
benchbox/core/**/validation.py @joeharris76
benchbox/core/equivalence/** @joeharris76
benchbox/core/query_plans/parsers/** @joeharris76
# Oracle-adjacent widening (soundness-surface-widening): reference-value
# loader/registry/digest fixtures, the validation+plan-capture entry point,
# and the sql_compat rule-dispatch core (not the whole high-churn tree).
benchbox/core/expected_results/** @joeharris76
benchbox/platforms/base/result_capture.py @joeharris76
benchbox/sql_compat/resolver.py @joeharris76
benchbox/sql_compat/decision.py @joeharris76
benchbox/sql_compat/rules/_registration.py @joeharris76
# Publication privacy: the anonymizer decides every published byte and the
# public pseudonym identity. Both failure modes are silent (leak a private
# value, or repartition public identity). The specs YAML defines which keys
# get hashed, so dropping an entry there is a silent leak with no code diff.
# Widened after PR #1512.
benchbox/core/results/anonymization.py @joeharris76
benchbox/core/results/anonymization_specs.yaml @joeharris76
benchbox/core/results/provenance.py @joeharris76
benchbox/core/results/status.py @joeharris76
benchbox/core/results/query_status.py @joeharris76
benchbox/validation/bundle.py @joeharris76
benchbox/core/publishing/admission.py @joeharris76
benchbox/core/publishing/bundle_publisher.py @joeharris76
_project/scripts/explorer_pipeline/models.py @joeharris76
_project/scripts/explorer_pipeline/pipeline.py @joeharris76
_project/scripts/explorer_pipeline/ranking.py @joeharris76
_project/scripts/explorer_pipeline/transformer.py @joeharris76
_project/scripts/explorer_pipeline/duckdb_builder.py @joeharris76
_project/scripts/explorer_pipeline/compare_math.py @joeharris76
_project/scripts/results_explorer_snapshot_invariants.py @joeharris76
benchbox/core/results/canonical_json.py @joeharris76
benchbox/core/results/schema_policy.py @joeharris76
_project/scripts/explorer_publish.py @joeharris76
scripts/generate_corpus_inventory.py @joeharris76
scripts/validate_submission.py @joeharris76
results-data/bundles/**/*.override.json @joeharris76
.github/workflows/validate-submission.yml @joeharris76
.github/workflows/sync-results-data-to-published.yml @joeharris76
.github/workflows/docs.yml @joeharris76
.github/workflows/publication-deploy.yml @joeharris76
.github/workflows/publication-preview-deploy.yml @joeharris76
.github/workflows/publication-preview-soak.yml @joeharris76
.github/workflows/publication-lane-docs.yml @joeharris76
.github/workflows/publication-lane-explorer.yml @joeharris76
.github/workflows/publication-corpus-cutover.yml @joeharris76
.github/workflows/publication-transaction.yml @joeharris76
.github/workflows/publication-recover.yml @joeharris76
.github/workflows/publication-canaries.yml @joeharris76
.github/workflows/site-deploy.yml @joeharris76
scripts/publication/verify_lane_isolation.py @joeharris76
# Self-protection: the review-gate machinery and the PyPI-publishing
# workflow. In-workflow checks are attacker-controlled for same-repo PRs
# (GitHub runs the PR's own copy of a pull_request-triggered workflow).
# NOTE: the develop ruleset enforces code-owner review
# (require_code_owner_review: true, live-verified 2026-09-16 against ruleset
# 15611785, active; the 2026-07-18 retirement is superseded — sole owner
# authors every PR and GitHub forbids self-approval, so soundness-path PRs
# need manual maintainer merge;
# see docs/operations/repo-admin-settings.md "Soundness-path review
# enforcement"). This file's role is to mirror
# SOUNDNESS_PREFIXES (auto-merge withholding) and route review requests.
# .github/workflows/pr.yml deliberately excluded
# (high churn; its required check is pinned by the ruleset-drift canary).
.github/CODEOWNERS @joeharris76
scripts/heavy_tier_needed.py @joeharris76
AGENTS.md @joeharris76
.github/PULL_REQUEST_TEMPLATE.md @joeharris76
.github/soundness-paths.txt @joeharris76
_project/scripts/soundness_paths.py @joeharris76
_project/scripts/oracle_review_check.py @joeharris76
.github/workflows/oracle-review.yml @joeharris76
_project/scripts/check_soundness_review.py @joeharris76
.github/workflows/ci.yml @joeharris76
.github/ci-units.yml @joeharris76
scripts/ci_units.py @joeharris76
scripts/ci_unit_result.py @joeharris76
scripts/release_flow.py @joeharris76
scripts/release_artifact_consumer.py @joeharris76
scripts/update_version.py @joeharris76
scripts/generate_changelog_entry.py @joeharris76
scripts/check_release_curation.py @joeharris76
scripts/check_dependency_bounds.py @joeharris76
_project/scripts/check_uv_lock_revision.py @joeharris76
_project/decisions/single-repo-migration.md @joeharris76
_project/scripts/auto_merge_soundness_paths.py @joeharris76
.github/workflows/release.yml @joeharris76
# Independent-publication control scripts. These exact paths mirror
# SOUNDNESS_FILES so changes route to manual maintainer review.
scripts/check_decision_records.py @joeharris76
publication/** @joeharris76
scripts/publication/** @joeharris76
scripts/site_deploy/** @joeharris76
deploy/** @joeharris76
benchbox/_binaries/** @joeharris76
benchbox/utils/binary_manifest.py @joeharris76
scripts/bundled_binary_manifest.py @joeharris76
scripts/verify_distribution_binaries.py @joeharris76
quality/comment-policy.json @joeharris76
quality/comment-policy-requirements.txt @joeharris76
quality/comment-policy-package.json @joeharris76
quality/comment-policy-package-lock.json @joeharris76
scripts/check_comment_policy.py @joeharris76
scripts/comment_syntax.py @joeharris76
scripts/comment_syntax_js.cjs @joeharris76
scripts/run_comment_policy.py @joeharris76
scripts/comment_payloads.py @joeharris76
scripts/comment_execution.py @joeharris76
scripts/comment_policy_entry.py @joeharris76
_project/scripts/soundness_merge_digest.py @joeharris76
.github/workflows/soundness-merge-digest.yml @joeharris76