diff --git a/groups b/groups
new file mode 100644
index 0000000..6675d65
--- /dev/null
+++ b/groups
@@ -0,0 +1,6 @@
+# UUID                   	Group Name
+#
+global:Anonymous-Users   	Anonymous Users
+global:Project-Owners    	Project Owners
+global:Registered-Users  	Registered Users
+mdb:pigweed-gob-admin-acl	mdb/pigweed-gob-admin-acl
diff --git a/project.config b/project.config
new file mode 100644
index 0000000..e49e4c5
--- /dev/null
+++ b/project.config
@@ -0,0 +1,66 @@
+[project]
+	description = Access inherited by all other projects.
+[receive]
+	requireContributorAgreement = false
+	requireSignedOffBy = false
+	requireChangeId = true
+	enableSignedPush = false
+[submit]
+	mergeContent = true
+[capability]
+	administrateServer = group mdb/pigweed-gob-admin-acl
+[access "refs/*"]
+	read = group mdb/pigweed-gob-admin-acl
+[access "refs/for/*"]
+	addPatchSet = group Registered Users
+[access "refs/for/refs/*"]
+	push = group Registered Users
+	pushMerge = group Registered Users
+[access "refs/heads/*"]
+	create = group Project Owners
+	create = group mdb/pigweed-gob-admin-acl
+	editTopicName = +force group Project Owners
+	editTopicName = +force group mdb/pigweed-gob-admin-acl
+	forgeAuthor = group Registered Users
+	forgeCommitter = group Project Owners
+	forgeCommitter = group mdb/pigweed-gob-admin-acl
+	label-Code-Review = -2..+2 group Project Owners
+	label-Code-Review = -2..+2 group mdb/pigweed-gob-admin-acl
+	label-Code-Review = -1..+1 group Registered Users
+	push = group Project Owners
+	push = group mdb/pigweed-gob-admin-acl
+	read = group Anonymous Users
+	revert = group Registered Users
+	submit = group Project Owners
+	submit = group mdb/pigweed-gob-admin-acl
+[access "refs/meta/config"]
+	exclusiveGroupPermissions = read
+	create = group Project Owners
+	create = group mdb/pigweed-gob-admin-acl
+	label-Code-Review = -2..+2 group Project Owners
+	label-Code-Review = -2..+2 group mdb/pigweed-gob-admin-acl
+	push = group Project Owners
+	push = group mdb/pigweed-gob-admin-acl
+	read = group Project Owners
+	read = group mdb/pigweed-gob-admin-acl
+	submit = group Project Owners
+	submit = group mdb/pigweed-gob-admin-acl
+[access "refs/meta/version"]
+	read = group Anonymous Users
+[access "refs/tags/*"]
+	create = group Project Owners
+	create = group mdb/pigweed-gob-admin-acl
+	createSignedTag = group Project Owners
+	createSignedTag = group mdb/pigweed-gob-admin-acl
+	createTag = group Project Owners
+	createTag = group mdb/pigweed-gob-admin-acl
+[label "Code-Review"]
+	function = MaxWithBlock
+	defaultValue = 0
+	copyMinScore = true
+	copyAllScoresOnTrivialRebase = true
+	value = -2 This shall not be merged
+	value = -1 I would prefer this is not merged as is
+	value = 0 No score
+	value = +1 Looks good to me, but someone else must approve
+	value = +2 Looks good to me, approved