diff --git a/CODEOWNERS b/CODEOWNERS
new file mode 100644
index 00000000..b17b66ed
--- /dev/null
+++ b/CODEOWNERS
@@ -0,0 +1,12 @@
+# Sensitive paths requiring review from Maintainers or Owners.
+# When org teams are created, replace usernames with team references.
+
+# Plugin manifests — changes affect all users (Maintainers + Owners)
+/plugins/sdlc-workflow/.claude-plugin/ @mrizzi @ruromero
+/.claude-plugin/marketplace.json @mrizzi @ruromero
+
+# Core methodology — highest trust required (Owners)
+/docs/methodology.md @mrizzi
+
+# Governance documents — highest trust required (Owners)
+/CONTRIBUTING.md @mrizzi