diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 00000000..f42a6ed7
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,28 @@
+# CODEOWNERS for tok (secrets & token scanning engine)
+* @GrayCodeAI/maintainers
+
+# Engine core
+/internal/       @GrayCodeAI/core-team
+/filters/        @GrayCodeAI/core-team
+/rules/          @GrayCodeAI/core-team
+/plugins/        @GrayCodeAI/core-team
+/commands/       @GrayCodeAI/core-team
+/config/         @GrayCodeAI/core-team
+
+# Security-sensitive scanning logic
+/skills/         @GrayCodeAI/security-team
+
+# API surface
+/api/            @GrayCodeAI/core-team
+/mcp/            @GrayCodeAI/core-team
+
+# CI / release / build tooling
+/.github/        @GrayCodeAI/devops-team
+/Makefile        @GrayCodeAI/devops-team
+/lefthook.yml    @GrayCodeAI/devops-team
+/scripts/        @GrayCodeAI/devops-team
+/.goreleaser.yml @GrayCodeAI/devops-team
+
+# Documentation
+*.md             @GrayCodeAI/docs-team
+/docs/           @GrayCodeAI/docs-team