atlas/.github/CODEOWNERS at 71d8ffd4e7daef224872db03fb75d9af5f6b8861 · Avarok-Cybersecurity/atlas · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
# Atlas CODEOWNERS
#
# Lines starting with `#` are comments. The LAST matching pattern wins
# (per GitHub's CODEOWNERS spec — be careful adding broader patterns
# at the bottom of this file, they will override more specific ones
# above).
#
# SECURITY: every path under .github/ — workflows, dependabot config,
# CODEOWNERS itself, issue/PR templates — is owner-only and must stay
# that way. A malicious workflow change can exfiltrate secrets through
# `pull_request_target` (it runs from the PR branch with secrets
# access), so do NOT add patterns below the `.github/` block that
# loosen ownership of anything inside that tree. Branch-protection on
# `main` enforces this by requiring CODEOWNER review on every PR.
#
# Reference: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners

# Default fallback — every PR pings the maintainer.
*                                            @tbraun96 @azeezish

# Compute path: kernel registration, model loaders, hot-path Rust.
kernels/                                     @tbraun96 @azeezish
crates/atlas-kernels/                        @tbraun96 @azeezish
crates/spark-model/                          @tbraun96 @azeezish
crates/spark-runtime/                        @tbraun96 @azeezish

# Server / HTTP API surface.
crates/spark-server/                         @tbraun96 @azeezish

# Multi-rank communication (NCCL / RDMA).
crates/spark-comm/                           @tbraun96 @azeezish

# Storage / NVMe-backed swap.
crates/spark-storage/                        @tbraun96 @azeezish

# Build, CI, governance. Belt-and-suspenders: the broad `.github/`
# pattern catches everything in the tree, and the more specific entries
# below are restated explicitly so a future contributor adding a more
# specific override (e.g. `.github/workflows/scratch.yml @someone-else`)
# notices they're working against an explicit ownership decision.
.github/                                     @tbraun96 @azeezish
.github/workflows/                           @tbraun96 @azeezish
.github/CODEOWNERS                           @tbraun96 @azeezish
.github/dependabot.yml                       @tbraun96 @azeezish
docs/adr/                                    @tbraun96 @azeezish
Cargo.toml                                   @tbraun96 @azeezish
LICENSE                                      @tbraun96 @azeezish
CLA.md                                       @tbraun96 @azeezish