Maintainers
Current maintainer: Mikko Kotila (mikkokotila, mailme@mikkokotila.com).
Maintainers own release approval, security triage, issue priority and merge decisions. mikkokotila is the approving authority in governance.yml. An approval must come from a reviewer eligible under the live ruleset; authors cannot approve their own changes.
Code owners for governance and supply-chain surfaces are mikkokotila, zero-bang and bit-mis, as declared in .github/CODEOWNERS. zero-bang and bit-mis have write access and can provide the required non-author approval for maintainer-authored changes. Ownership and live review enforcement take effect through the reviewed integration and ruleset activation.
SETUP.md records the external activation requirements. GOVERNANCE.md describes decisions and CLAUDE.md describes merge contracts.