From bbbdb1d1d9d92dbd19b132625678ea10642156a5 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Mon, 17 Aug 2026 22:55:24 +0000 Subject: [PATCH 1/2] chore: defense - add CODEOWNERS for high-risk paths MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Require @jaredwray review on /.github/, /.cursor/, /.devcontainer/, and /scripts/. Reconcile § 1 security docs as merged in PR #105. Co-authored-by: Jared Wray --- .github/CODEOWNERS | 6 ++++++ DEFENSE_IN_DEPTH.md | 6 +++--- 2 files changed, 9 insertions(+), 3 deletions(-) create mode 100644 .github/CODEOWNERS diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..8339057 --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,6 @@ +# High-risk paths. Last matching pattern wins. +# Root-anchored so nested copies (e.g. skills/**/scripts/) are not owned here. +/.github/ @jaredwray +/.cursor/ @jaredwray +/.devcontainer/ @jaredwray +/scripts/ @jaredwray diff --git a/DEFENSE_IN_DEPTH.md b/DEFENSE_IN_DEPTH.md index 58e30f7..6dfbb3f 100644 --- a/DEFENSE_IN_DEPTH.md +++ b/DEFENSE_IN_DEPTH.md @@ -6,12 +6,12 @@ Profile: npm library · public ## 1. Security docs -- [ ] `SECURITY.md` present — contact info + "How this repository is secured" summary (PR #105 pending) -- [ ] `DEFENSE_IN_DEPTH.md` present (this file) (PR #105 pending) +- [x] `SECURITY.md` present — contact info + "How this repository is secured" summary — PR #105 +- [x] `DEFENSE_IN_DEPTH.md` present (this file) — PR #105 ## 2. CODEOWNERS and cloud bootstrap -- [ ] `.github/CODEOWNERS` covers `/.github/`, `/.cursor/`, `/.devcontainer/`, `/scripts/` with owners the maintainer names +- [ ] `.github/CODEOWNERS` covers `/.github/`, `/.cursor/`, `/.devcontainer/`, `/scripts/` with owners the maintainer names (PR pending) - [ ] Codespaces and Cursor Cloud Agents bootstrap Aikido Safe Chain via scripts/setup-cloud-environment.sh (--ci shims, frozen lockfile) ## 3. Dependencies (pnpm) From 15a14233ec92c43c919657c3daf5a5c8daa44bf1 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Mon, 17 Aug 2026 22:55:44 +0000 Subject: [PATCH 2/2] chore: defense - record PR #106 on CODEOWNERS checklist Co-authored-by: Jared Wray --- DEFENSE_IN_DEPTH.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/DEFENSE_IN_DEPTH.md b/DEFENSE_IN_DEPTH.md index 6dfbb3f..5ca01de 100644 --- a/DEFENSE_IN_DEPTH.md +++ b/DEFENSE_IN_DEPTH.md @@ -11,7 +11,7 @@ Profile: npm library · public ## 2. CODEOWNERS and cloud bootstrap -- [ ] `.github/CODEOWNERS` covers `/.github/`, `/.cursor/`, `/.devcontainer/`, `/scripts/` with owners the maintainer names (PR pending) +- [ ] `.github/CODEOWNERS` covers `/.github/`, `/.cursor/`, `/.devcontainer/`, `/scripts/` with owners the maintainer names (PR #106 pending) - [ ] Codespaces and Cursor Cloud Agents bootstrap Aikido Safe Chain via scripts/setup-cloud-environment.sh (--ci shims, frozen lockfile) ## 3. Dependencies (pnpm)