From e71b0bd80b7543909225a1d06681736374f30c1f Mon Sep 17 00:00:00 2001
From: damaz91 <federico.damato91@gmail.com>
Date: Thu, 2 Jul 2026 13:10:27 +0000
Subject: [PATCH 1/2] ci: add governance workflows and clean up CODEOWNERS

TAG=agy

CONV=c95717a8-698f-48d6-9a91-982f633014a4
---
 .github/CODEOWNERS                       | 12 ++++++--
 .github/workflows/governance.yml         | 35 ++++++++++++++++++++++++
 .github/workflows/pr-review-listener.yml | 12 ++++++++
 3 files changed, 57 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/governance.yml
 create mode 100644 .github/workflows/pr-review-listener.yml

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index f2de19f..dd7dcbc 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -1,7 +1,15 @@
-# Universal Commerce Protocol (UCP) Codeowners
+# Universal Commerce Protocol (UCP) JS SDK Codeowners
 
 # Default for all files.
-*  @Universal-Commerce-Protocol/devops-maintainers @Universal-Commerce-Protocol/maintainers @Universal-Commerce-Protocol/tech-council @Universal-Commerce-Protocol/governance-council
+*  @Universal-Commerce-Protocol/maintainers @Universal-Commerce-Protocol/tech-council
+
+# Infrastructure, Tooling & Configuration
+/.github/                 @Universal-Commerce-Protocol/devops-maintainers
+/scripts/                 @Universal-Commerce-Protocol/devops-maintainers
+/.pre-commit-config.yaml  @Universal-Commerce-Protocol/devops-maintainers
+/.gitignore              @Universal-Commerce-Protocol/devops-maintainers
+/package.json             @Universal-Commerce-Protocol/devops-maintainers
+/package-lock.json        @Universal-Commerce-Protocol/devops-maintainers
 
 # Governance
 /LICENSE                 @Universal-Commerce-Protocol/governance-council
diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
new file mode 100644
index 0000000..9aedeb8
--- /dev/null
+++ b/.github/workflows/governance.yml
@@ -0,0 +1,35 @@
+---
+name: PR Governance
+
+on:
+  pull_request_target:
+    types: [
+      opened, 
+      synchronize, 
+      reopened, 
+      ready_for_review, 
+      review_requested, 
+      review_request_removed, 
+      assigned, 
+      unassigned
+    ]
+  workflow_run:
+    workflows: ["PR Review Listener"]
+    types: [completed]
+
+jobs:
+  governance:
+    name: Reviews
+    permissions:
+      statuses: write
+      contents: read
+      pull-requests: read
+    # Use the reusable workflow defined in the central governance repository
+    # zizmor: ignore[ref-confusion]
+    uses: Universal-Commerce-Protocol/.github/.github/workflows/reusable-governance.yml@main
+    with:
+      pr-number: ${{ github.event.pull_request.number }}
+      commit-sha: ${{ github.event.pull_request.head.sha || github.event.workflow_run.head_sha }}
+    secrets:
+      # Required: An org-level Read token to read team memberships
+      ORG_READ_TOKEN: ${{ secrets.ORG_READ_TOKEN }}
diff --git a/.github/workflows/pr-review-listener.yml b/.github/workflows/pr-review-listener.yml
new file mode 100644
index 0000000..641e7a9
--- /dev/null
+++ b/.github/workflows/pr-review-listener.yml
@@ -0,0 +1,12 @@
+name: PR Review Listener
+on:
+  pull_request_review:
+    types: [submitted, dismissed]
+
+jobs:
+  signal:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Signal success
+        run: |
+          echo "PR ${{ github.event.pull_request.number }} review state changed."

From 512d102701d06c36df1e8cb78471133b8b967562 Mon Sep 17 00:00:00 2001
From: Federico D'Amato <damaz@google.com>
Date: Thu, 2 Jul 2026 15:14:26 +0200
Subject: [PATCH 2/2] Delete .github/CODEOWNERS

---
 .github/CODEOWNERS | 16 ----------------
 1 file changed, 16 deletions(-)
 delete mode 100644 .github/CODEOWNERS

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
deleted file mode 100644
index dd7dcbc..0000000
--- a/.github/CODEOWNERS
+++ /dev/null
@@ -1,16 +0,0 @@
-# Universal Commerce Protocol (UCP) JS SDK Codeowners
-
-# Default for all files.
-*  @Universal-Commerce-Protocol/maintainers @Universal-Commerce-Protocol/tech-council
-
-# Infrastructure, Tooling & Configuration
-/.github/                 @Universal-Commerce-Protocol/devops-maintainers
-/scripts/                 @Universal-Commerce-Protocol/devops-maintainers
-/.pre-commit-config.yaml  @Universal-Commerce-Protocol/devops-maintainers
-/.gitignore              @Universal-Commerce-Protocol/devops-maintainers
-/package.json             @Universal-Commerce-Protocol/devops-maintainers
-/package-lock.json        @Universal-Commerce-Protocol/devops-maintainers
-
-# Governance
-/LICENSE                 @Universal-Commerce-Protocol/governance-council
-/.github/CODEOWNERS      @Universal-Commerce-Protocol/governance-council