From bebba8703daa12bc93656de802ef89052fa328a4 Mon Sep 17 00:00:00 2001 From: nearlyforget Date: Wed, 11 Feb 2026 07:32:04 +0000 Subject: [PATCH 1/7] chore: add CODEOWNERS file --- .github/CODEOWNERS | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 .github/CODEOWNERS diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..3e8642f --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,2 @@ +# Universal Commerce Protocol (UCP) Codeowners +* @Universal-Commerce-Protocol/devops-maintainers From 8405e2479cc33a796fb161502352d158ac4c43ee Mon Sep 17 00:00:00 2001 From: nearlyforget Date: Wed, 11 Feb 2026 17:41:42 +0000 Subject: [PATCH 2/7] update CODEOWNERS with granular infra and governance rules --- .github/CODEOWNERS | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 3e8642f..a9de448 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1,2 +1,5 @@ # Universal Commerce Protocol (UCP) Codeowners * @Universal-Commerce-Protocol/devops-maintainers + +# Governance +/SECURITY.md @Universal-Commerce-Protocol/governance-council From 34186e0575c50144e20e6dfbc36c31aa964636d6 Mon Sep 17 00:00:00 2001 From: nearlyforget Date: Thu, 12 Feb 2026 19:36:27 +0000 Subject: [PATCH 3/7] docs: add governance-council as owner of CODEOWNERS --- .github/CODEOWNERS | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index a9de448..e4ad2d8 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -2,4 +2,5 @@ * @Universal-Commerce-Protocol/devops-maintainers # Governance +/.github/CODEOWNERS @Universal-Commerce-Protocol/governance-council /SECURITY.md @Universal-Commerce-Protocol/governance-council From 68baf4de22e49343d37a97a66d000280592de626 Mon Sep 17 00:00:00 2001 From: nearlyforget Date: Thu, 12 Feb 2026 19:45:30 +0000 Subject: [PATCH 4/7] docs: move CODEOWNERS ownership to end of file to ensure precedence --- .github/CODEOWNERS | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index e4ad2d8..f451965 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -2,5 +2,6 @@ * @Universal-Commerce-Protocol/devops-maintainers # Governance -/.github/CODEOWNERS @Universal-Commerce-Protocol/governance-council /SECURITY.md @Universal-Commerce-Protocol/governance-council + +/.github/CODEOWNERS @Universal-Commerce-Protocol/governance-council From 15fbbc31d26b74d650ace44ac71bc5b34965edc5 Mon Sep 17 00:00:00 2001 From: nearlyforget Date: Fri, 13 Feb 2026 23:13:41 +0000 Subject: [PATCH 5/7] chore: remove community health files from CODEOWNERS --- .github/CODEOWNERS | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index f451965..055bfa8 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -2,6 +2,5 @@ * @Universal-Commerce-Protocol/devops-maintainers # Governance -/SECURITY.md @Universal-Commerce-Protocol/governance-council /.github/CODEOWNERS @Universal-Commerce-Protocol/governance-council From f53b220585e066cebf9c94dd37903647477343d8 Mon Sep 17 00:00:00 2001 From: nearlyforget Date: Fri, 13 Feb 2026 23:19:13 +0000 Subject: [PATCH 6/7] style: remove redundant empty line in CODEOWNERS --- .github/CODEOWNERS | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 055bfa8..6aca381 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -2,5 +2,4 @@ * @Universal-Commerce-Protocol/devops-maintainers # Governance - /.github/CODEOWNERS @Universal-Commerce-Protocol/governance-council From 2fcb2ece9b1a9e7b28a249f0022c08c4722d3d38 Mon Sep 17 00:00:00 2001 From: nearlyforget Date: Fri, 13 Feb 2026 23:41:22 +0000 Subject: [PATCH 7/7] chore: remove local community health files in favor of org-level ones --- SECURITY.md | 23 ----------------------- 1 file changed, 23 deletions(-) delete mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md deleted file mode 100644 index b01d986..0000000 --- a/SECURITY.md +++ /dev/null @@ -1,23 +0,0 @@ - - -# Security Policy - -To report a security issue, please use [g.co/vulnz](https://g.co/vulnz). - -The Google Security Team will respond within 5 working days of your report on g.co/vulnz. - -We use g.co/vulnz for our intake, and do coordination and disclosure here using GitHub Security Advisory to privately discuss and fix the issue.