Create a CODEOWNERS file for the VMR. Questions that need to be answered:
- Who are the owners?
- Which folders should be protected?
Because CODEOWNERS will require review from a given party before check-in, at least without bypassing requirements, it may not be the right solution to put this on every src\ directory.