[fullsend-ai-coder]

Summary

Changes the root CODEOWNERS wildcard rule from @fullsend-ai/core to @fullsend-ai/maintainers.

Context

The maintainers team was created by fullsend-ai/org#18 (merged 2026-10-29). That PR replaced fullsend-ai/org#16, which was closed without merging. In peribolos.yaml the new team has maintain permission on agents, and CODEOWNERS needs at least write access to take effect, so that is enough.

Testing

• scan-secrets passed on the changed file and on the staged index.
• pre-commit could not fetch remote hook repos in the sandbox (TLS error). Instead, the hooks that apply to this file from pre-commit-hooks v6.0.0 (end-of-file, trailing-whitespace, detect-private-key, merge-conflict, mixed-line-ending, large-files) and the lint-release-cases local hook were run directly. All passed.
• make lint (skillsaw) could not run because uvx is not installed. It does not cover CODEOWNERS.

Reviewer notes

• I checked only the declarative org config, not the team's live access on GitHub. After merging, check that GitHub shows no owner errors on CODEOWNERS.
• CODEOWNERS is a protected path, so a human must approve this PR.

🤖 Generated with Claude Code

---

Closes #1828

Post-script verification

• Branch is not main/master (agent/1828-codeowners-maintainers)
• Secret scan passed (gitleaks — ec1ed4607ff6df637d09e7258abb426732f7cac9..HEAD)
• PR body secret scan passed (gitleaks — no-git)
• Final PR description secret scan passed (gitleaks — no-git)

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 9:56 AM UTC · Completed 10:01 AM UTC

Commit: afd072b · View workflow run →

Runtime: pi · Model: sonnet → claude-sonnet-5-5 · Effort: high · Cost: $0.58

[fullsend-ai-review]

<!-- fullsend:risk-assessment -->
Risk Assessment: low (1/5)

Details

Minimal one-line config change by a bot matching the linked issue scope, with low churn and no regressions offsetting the single protected path modification to yield low composite risk.

[fullsend-ai-review]

Review

Findings

Medium

• [protected-path] CODEOWNERS:2 — This PR modifies the protected path CODEOWNERS, changing the root wildcard owner from @fullsend-ai/core to @fullsend-ai/maintainers. It links issue CODEOWNERS: change @fullsend-ai/core to @fullsend-ai/maintainers #1828, which authorizes exactly this change, and the description explains the rationale. Human approval is always required for protected-path changes, whatever the context. The reviewer could not check the new team's membership or its live repository access, because the org config is in another repository. A human reviewer should confirm that @fullsend-ai/maintainers exists and has write-or-higher access to this repository. After merge, they should also check that GitHub shows no owner errors on CODEOWNERS. Otherwise GitHub ignores the owner, and the wildcard rule has no effective owner.
  Remediation: Obtain human maintainer approval for this protected-path change.

[fullsend-ai-review]

See the review comment for full details.

[fullsend-ai-review]

[medium] protected-path

This PR modifies the protected path CODEOWNERS (root wildcard owner changed from @fullsend-ai/core to @fullsend-ai/maintainers). It links issue #1828, which authorizes this change, and the description explains the rationale. Human approval is always required for protected-path changes regardless of context. Membership and live repository access of @fullsend-ai/maintainers could not be verified from this review environment (the org config is in another repository).

Suggested fix: Obtain human maintainer approval; confirm @fullsend-ai/maintainers has write-or-higher access to this repository and that GitHub shows no owner errors on CODEOWNERS after merge.