Developed and delivered a Git Trusted Branch Policy for the enterprise-contract/ec-policies repository, focusing on enhancing build security and governance within CI/CD workflows. The work involved implementing policy logic in Rego and YAML to ensure that builds originate only from an allowlisted set of branches, effectively preventing untrusted or temporary branches from triggering builds and reducing risks associated with force-pushes. The solution included configuration for allowed branch patterns, comprehensive automated tests, and thorough documentation updates. By integrating DevSecOps and GitOps practices, this contribution improved build provenance and compliance, supporting more secure and auditable deployment pipelines for enterprise environments.