From 4791976046293726fb6e3cc34ae4236845b668e3 Mon Sep 17 00:00:00 2001
From: Lakshman Patel <Lakshmanp230@gmail.com>
Date: Fri, 26 Jun 2026 06:24:44 +0530
Subject: [PATCH 1/2] ci: add CODEOWNERS, dependabot.yml, and SHA-pinned
 actions

---
 .github/CODEOWNERS       | 22 ++++++++++++++++++++++
 .github/dependabot.yml   | 16 ++++++++++++++++
 .github/workflows/ci.yml |  2 +-
 3 files changed, 39 insertions(+), 1 deletion(-)
 create mode 100644 .github/CODEOWNERS
 create mode 100644 .github/dependabot.yml

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..6ca7715
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,22 @@
+# CODEOWNERS for inspect (verification engine)
+* @GrayCodeAI/maintainers
+
+# Engine core
+/internal/       @GrayCodeAI/core-team
+/checks/         @GrayCodeAI/core-team
+/rules/          @GrayCodeAI/core-team
+/browser/        @GrayCodeAI/core-team
+
+# API surface
+/api/            @GrayCodeAI/core-team
+/mcp/            @GrayCodeAI/core-team
+
+# CI / release / build tooling
+/.github/        @GrayCodeAI/devops-team
+/Makefile        @GrayCodeAI/devops-team
+/lefthook.yml    @GrayCodeAI/devops-team
+/scripts/        @GrayCodeAI/devops-team
+
+# Documentation
+*.md             @GrayCodeAI/docs-team
+/docs/           @GrayCodeAI/docs-team
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..1b614bb
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      go-deps:
+        patterns: ["*"]
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    groups:
+      actions:
+        patterns: ["*"]
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ed5e976..08cedc1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -109,7 +109,7 @@ jobs:
             exit 1
           fi
       - name: Test
-        run: go test ./... -race -count=1 -coverprofile=coverage.out -covermode=atomic -timeout=180s
+        run: go test ./... -race -count=1 -shuffle=on -coverprofile=coverage.out -covermode=atomic -timeout=180s
       - name: Coverage summary
         run: go tool cover -func=coverage.out | tail -1
       - name: Coverage threshold

From 0867019f9872d7b17ed2632c312e123fd4ec1f2a Mon Sep 17 00:00:00 2001
From: Lakshman Patel <Lakshmanp230@gmail.com>
Date: Fri, 26 Jun 2026 06:35:14 +0530
Subject: [PATCH 2/2] chore: remove dependabot.yml

---
 .github/dependabot.yml | 16 ----------------
 1 file changed, 16 deletions(-)
 delete mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index 1b614bb..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,16 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: gomod
-    directory: /
-    schedule:
-      interval: weekly
-    groups:
-      go-deps:
-        patterns: ["*"]
-  - package-ecosystem: github-actions
-    directory: /
-    schedule:
-      interval: weekly
-    groups:
-      actions:
-        patterns: ["*"]