diff --git a/.github/branch-protection.yml b/.github/branch-protection.yml
index a1b6c00d..50c651a9 100644
--- a/.github/branch-protection.yml
+++ b/.github/branch-protection.yml
@@ -9,8 +9,13 @@ allow_force_push: false
 allow_deletions: false
 require_conversation_resolution: true
 
-required_approving_review_count: 1
-require_codeowners_review: true
+# Solo maintainer until NORTHSTARS.md §O7's M18 target (≥1 non-employee
+# maintainer active) is met. GitHub doesn't allow authors to approve their
+# own PRs, so `1` review required + sole maintainer = unmergeable PRs.
+# Bump both back to `1` / `true` the day a second maintainer joins.
+# PRINCIPLES §4: don't police what you don't have.
+required_approving_review_count: 0
+require_codeowners_review: false
 dismiss_stale_reviews_on_push: true
 
 require_signed_commits: true   # see scripts/setup-signing.sh