# Every pull request requests review from the maintainers below.
# Either maintainer can review and merge any change.
* @SivanCola @esengine

# Keep the provider-side signing policy and its GitHub control plane under the
# same explicit review boundary as the machine-readable contract.
/.signpath/ @SivanCola @esengine
/.github/workflows/release-stable.yml @SivanCola @esengine
/.github/workflows/release-candidate.yml @SivanCola @esengine
/.github/workflows/release-candidate-verify.yml @SivanCola @esengine
/.github/workflows/release-promote.yml @SivanCola @esengine
/.github/workflows/release-verify.yml @SivanCola @esengine
/.github/workflows/release-desktop.yml @SivanCola @esengine
/scripts/complete-signpath-request.ps1 @SivanCola @esengine
/scripts/signpath-checkpoint.mjs @SivanCola @esengine
/scripts/package-windows-desktop.sh @SivanCola @esengine
/scripts/verify-windows-authenticode.ps1 @SivanCola @esengine
/scripts/finalize-windows-signed-candidate.sh @SivanCola @esengine
/scripts/release-candidate.mjs @SivanCola @esengine
/scripts/verify-release-artifact-archive.mjs @SivanCola @esengine
/scripts/release-candidate-tags.sh @SivanCola @esengine
/scripts/verify-release-authorization.sh @SivanCola @esengine
/scripts/resolve-release-candidate.mjs @SivanCola @esengine
/scripts/validate-release-control-plane.sh @SivanCola @esengine
/scripts/verify-stable-release-artifacts.sh @SivanCola @esengine
/cmd/signpath-contract/ @SivanCola @esengine
