security: add CODEOWNERS routing autonomy-policy

[catchmeifyoucaan]

…curity team

Added CODEOWNERS file to define security review requirements.

Summary

Protocol Surface

Boundary Check

• This change keeps Jarvis protocol-only.
• This change does not add host runtime, UI, auth, storage, billing, model orchestration, tool execution, scoring, payment, deployment, monitoring, host integration, host workflow, adapter, or wrapper code.

Compatibility Impact

Conformance Impact

Validation

• python3 scripts/check_conformance_fixtures.py
• python3 scripts/check_openapi_contract.py
• python3 scripts/check_markdown_links.py
• python3 scripts/check_protocol_wording.py
• python3 scripts/check_sdk_boundary.py if SDK boundary, package, helper, or fixture snapshot paths changed
• npm --workspace @jarvis-protocol/sdk test if TypeScript helper paths changed
• npm run test:python if Python helper paths changed
• git diff --check
• node --check demo/assets/app.js if demo JavaScript changed

Summary by CodeRabbit

• Chores
  • Added repository ownership rules to require security review for sensitive areas, including protocol documentation, package configuration, CI/CD workflows, and environment/secrets files.
  • Clarified that changes in these areas now need mandatory security approval before merging.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 53074405-7825-4721-a4d2-71856a3d9d19

📥 Commits

Reviewing files that changed from the base of the PR and between cdc1646 and da612ca.

📒 Files selected for processing (1)

• .github/CODEOWNERS

---

📝 Walkthrough

Walkthrough

A new .github/CODEOWNERS file was added, assigning @Flow-Research/security as required reviewer for autonomy policy and protocol documentation, package configuration, CI/CD workflow files, and .env* secrets patterns.

Changes

CODEOWNERS Configuration

Layer / File(s)	Summary
Add CODEOWNERS routing .github/CODEOWNERS	New file assigns @Flow-Research/security ownership for docs/protocol/, packages/, .github/workflows/, and .env* files, requiring security review for these paths.

Estimated code review effort: 1 (Trivial) | ~3 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly matches the main change: adding CODEOWNERS routing for autonomy-policy and security review.
Description check	✅ Passed	The description follows the required template and includes all major sections, though several fields are only minimally filled out.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch catchmeifyoucaan-patch-1

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[catchmeifyoucaan]

@Abiorh001 This is just codeowners changes, the headline was wrong, it has nothing to do with Jarvis miner