chore: add stricter review rules for complytime repo

safe-settings/repos/complytime.yml

@@ -0,0 +1,35 @@
+# Repo-level override for complytime.
+# complytime is the main project repo and requires stricter review
+# rules than the non-code-repos baseline.
+#
+# This override is applied on top of the non-code-repos suborg
+# settings, which inherit from org-wide settings.yml.
+
+# Supplement the org-level "safe-settings: non-code repos" ruleset
+# to require 2 approvers and dismiss stale reviews (non-code repos
+# baseline is 1 approver, no stale review dismissal). This matches
+# the current "main" ruleset on complytime (id=17986337).
+#
+# NOTE: safe-settings rulesets defined here are repo-level rulesets,
+# separate from the org-level rulesets in settings.yml. The org-level
+# ruleset still applies; GitHub evaluates both and the most restrictive
+# rule wins.
+rulesets:
+  - name: "safe-settings: complytime stricter review"
+    target: branch
+    enforcement: active
+
+    conditions:
+      ref_name:
+        include:
+          - "~DEFAULT_BRANCH"
+        exclude: []
+
+    rules:
+      - type: pull_request
+        parameters:
+          required_approving_review_count: 2
+          dismiss_stale_reviews_on_push: true
+          require_code_owner_review: true
+          require_last_push_approval: false
+          required_review_thread_resolution: false