diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 00000000..2c8fff67
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,7 @@
+# Default owner for everything
+*               @smallcase/gw-fe
+
+# Release machinery — always reviewed, regardless of who touches it
+/.github/       @smallcase/gw-fe
+/scripts/       @smallcase/gw-fe
+/lefthook.yml   @smallcase/gw-fe