diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index a4239a829fb..f1a12a14eb8 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -4,18 +4,20 @@
 # means approval from ANY ONE of them satisfies the requirement.
 
 # Default: quickwit-core owns everything
-*                                                        @quickwit-oss/quickwit-core
+# *                                                        @quickwit-oss/quickwit-core
 
 # byoc-metrics paths — owned by byoc-metrics
-/quickwit/quickwit-parquet-engine/                       @quickwit-oss/byoc-metrics
-/quickwit/quickwit-datafusion/                           @quickwit-oss/byoc-metrics
-/quickwit/quickwit-df-core/                              @quickwit-oss/byoc-metrics
-/quickwit/quickwit-dst/                                  @quickwit-oss/byoc-metrics
-/quickwit/quickwit-indexing/src/actors/parquet_pipeline/ @quickwit-oss/byoc-metrics
+# /quickwit/quickwit-parquet-engine/                       @quickwit-oss/byoc-metrics
+# /quickwit/quickwit-datafusion/                           @quickwit-oss/byoc-metrics
+# /quickwit/quickwit-df-core/                              @quickwit-oss/byoc-metrics
+# /quickwit/quickwit-dst/                                  @quickwit-oss/byoc-metrics
+# /quickwit/quickwit-indexing/src/actors/parquet_pipeline/ @quickwit-oss/byoc-metrics
 
 # Shared paths — either team can approve. `docs/internals/` is shared
 # architecture + verification docs that any team working on the codebase
 # may need to update. `Cargo.lock` churns on routine dependency bumps
 # and doesn't carry domain-specific review value.
-/docs/internals/                                         @quickwit-oss/quickwit-core @quickwit-oss/byoc-metrics
-/quickwit/Cargo.lock                                     @quickwit-oss/quickwit-core @quickwit-oss/byoc-metrics
+# /docs/internals/                                         @quickwit-oss/quickwit-core @quickwit-oss/byoc-metrics
+# /quickwit/Cargo.lock                                     @quickwit-oss/quickwit-core @quickwit-oss/byoc-metrics
+
+*   @celonis/identity-platform @celonis/platform-access
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 0e8c9026137..dca44fe66ea 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -27,6 +27,9 @@ env:
 
 jobs:
   test:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     name: Coverage
     runs-on: gh-ubuntu-arm64
     timeout-minutes: 40
@@ -178,7 +181,9 @@ jobs:
           files: ./quickwit/lcov.info
 
   on-failure:
-    if: ${{ github.repository_owner == 'quickwit-oss' && failure() }}
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     name: On Failure
     needs: [test]
     runs-on: ubuntu-latest
diff --git a/.github/workflows/publish_cross_images.yml b/.github/workflows/publish_cross_images.yml
index 186d6e99067..6ca263ea616 100644
--- a/.github/workflows/publish_cross_images.yml
+++ b/.github/workflows/publish_cross_images.yml
@@ -13,6 +13,9 @@ permissions:
 
 jobs:
   build-cross-images:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     name: Publish cross images
     runs-on: ubuntu-latest
     environment:
diff --git a/.github/workflows/publish_docker_images.yml b/.github/workflows/publish_docker_images.yml
index 9e9049b86bb..04e902ab282 100644
--- a/.github/workflows/publish_docker_images.yml
+++ b/.github/workflows/publish_docker_images.yml
@@ -22,10 +22,10 @@ env:
 
 jobs:
   build-lambda:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     name: Build Lambda ARM64
-    # Only build a fresh lambda for tag-triggered builds (v*, qw*, etc.).
-    # Branch/edge builds and workflow_dispatch fall back to the pinned URL in build.rs.
-    if: github.ref_type == 'tag'
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -77,8 +77,10 @@ jobs:
           retention-days: 3
 
   docker:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     needs: [build-lambda]
-    if: always() && (needs.build-lambda.result == 'success' || needs.build-lambda.result == 'skipped')
     strategy:
       matrix:
         include:
@@ -187,6 +189,9 @@ jobs:
           retention-days: 1
 
   merge:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     runs-on: ubuntu-latest
     needs: [docker]
     permissions:
diff --git a/.github/workflows/publish_lambda.yaml b/.github/workflows/publish_lambda.yaml
index e9b757511ef..9bfe4df22ec 100644
--- a/.github/workflows/publish_lambda.yaml
+++ b/.github/workflows/publish_lambda.yaml
@@ -21,6 +21,9 @@ permissions:
 
 jobs:
   build-lambda:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     name: Build Lambda ARM64
     runs-on: ubuntu-latest
     permissions:
diff --git a/.github/workflows/publish_nightly_packages.yml b/.github/workflows/publish_nightly_packages.yml
index 7e428fef676..df4097281e0 100644
--- a/.github/workflows/publish_nightly_packages.yml
+++ b/.github/workflows/publish_nightly_packages.yml
@@ -10,6 +10,9 @@ permissions:
 
 jobs:
   build-macos-binaries:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     name: Build ${{ matrix.target }}
     runs-on: macos-latest
     permissions:
@@ -27,6 +30,9 @@ jobs:
           version: nightly
           token: ${{ secrets.GITHUB_TOKEN }}
   build-linux-binaries:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/publish_release_packages.yml b/.github/workflows/publish_release_packages.yml
index f71cf22bdcf..939f8d499aa 100644
--- a/.github/workflows/publish_release_packages.yml
+++ b/.github/workflows/publish_release_packages.yml
@@ -10,6 +10,9 @@ permissions:
 
 jobs:
   build-lambda:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     name: Build Lambda ARM64
     runs-on: ubuntu-latest
     permissions:
@@ -62,6 +65,9 @@ jobs:
           retention-days: 3
 
   build-macos-binaries:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     name: Build ${{ matrix.target }}
     runs-on: macos-latest
     needs: [build-lambda]
@@ -90,6 +96,9 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
 
   build-linux-binaries:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     strategy:
       matrix:
         target: [x86_64-unknown-linux-gnu, aarch64-unknown-linux-gnu]
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 9317e7998eb..e89534be4cb 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -11,6 +11,9 @@ permissions:
 
 jobs:
   analysis:
+    # Disabled on current fork: only the shared workflows are kept, others are not required for the fork.
+    if: false
+
     name: Scorecards analysis
     runs-on: ubuntu-latest
     permissions: