Summary

• Introduces CODEOWNERS to formalize default code ownership.
• Sets repo-wide default owners to @dydxprotocol/web-code-owners.
• Assigns @dydxprotocol/security ownership for .github and CODEOWNERS to enforce governance on security/policy files.

Details

• Repo governance:
  • New CODEOWNERS file at repo root.
  • Default owner: @dydxprotocol/web-code-owners for all paths.
  • Security team is the sole owner for:
    • /.github/ (workflows, issue templates, policies)
    • /CODEOWNERS (prevents unilateral changes to ownership rules)

Risk & Impact

• Low risk: affects review workflow only.
• If branch protection enforces CODEOWNERS, PRs touching .github/ or CODEOWNERS will require approval from @dydxprotocol/security.
• No runtime, API, or build changes.

Testing

• No tests added; governance configuration is exercised by GitHub’s CODEOWNERS enforcement.

Reviewer Notes

• Verify branch protection rules enforce CODEOWNERS as intended.
• Confirm the listed teams exist and have appropriate permissions.