A repository owner adds a CODEOWNERS file and a workflow that classifies Copilot-created pull requests by changed paths. The goal is to require human review for sensitive files while allowing low-risk changes to proceed with required checks. Evaluate the following statements. 1. CODEOWNERS can route sensitive path changes to accountable reviewers. 2. Required checks can preserve low-risk velocity without removing validation. 3. This configuration guarantees no low-risk PR ever needs review.

# .github/CODEOWNERS
/src/auth/ @octo-org/security-reviewers
/src/payments/ @octo-org/payments-reviewers
/.github/workflows/ @octo-org/platform-reviewers
name: classify-copilot-risk

on:
  pull_request:
    branches:
      - main

permissions:
  contents: read
  pull-requests: read

jobs:
  classify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Print review routing guidance
        run: |
           echo "Use CODEOWNERS for sensitive path review."
           echo "Use required checks for low-risk validation."