diff --git a/groups b/groups
index 86c73e3..10b10f1 100644
--- a/groups
+++ b/groups
@@ -1,11 +1,14 @@
-# UUID                                  	Group Name
+# UUID                                                        	Group Name
 #
-25e1cfff90e3f648aa2acd2ee42818ea5b7177ce	gn-scoped
-403927c6ea7e2607dd8685c67463329745b869a1	autoupdate-service-accounts
-5c109e6b6e3bc0590371cb5ece58e716ada4b5da	SLSA Policy Verification Service Accounts
-ee87c80457698612d1b2a8cbc7d4ea4e8bb96f51	autoupdate-vigil-service-accounts
-fcfedbebca31cfcd7c033245d5bfb405bf9ae546	autoupdate-onboarding-service-accounts
-global:Anonymous-Users                  	Anonymous Users
-global:Project-Owners                   	Project Owners
-global:Registered-Users                 	Registered Users
-mdb:gn-gerrit-owners                    	mdb/gn-gerrit-owners
+25e1cfff90e3f648aa2acd2ee42818ea5b7177ce                      	gn-scoped
+403927c6ea7e2607dd8685c67463329745b869a1                      	autoupdate-service-accounts
+5c109e6b6e3bc0590371cb5ece58e716ada4b5da                      	SLSA Policy Verification Service Accounts
+ee87c80457698612d1b2a8cbc7d4ea4e8bb96f51                      	autoupdate-vigil-service-accounts
+fcfedbebca31cfcd7c033245d5bfb405bf9ae546                      	autoupdate-onboarding-service-accounts
+global:Anonymous-Users                                        	Anonymous Users
+global:Project-Owners                                         	Project Owners
+global:Registered-Users                                       	Registered Users
+google:AI2Pq9pnFF6OP6N1uCS2nqPRxfENXJY7z3pdKTiyHUjKlDAaRnNLn-g	google/google-individual:signcla
+google:AI2Pq9r_ksT_hfUOny8swsG8krQwPL5eOM0hGHf4QWGOPdy9igqsdhs	google/google-union:signcla
+mdb:gn-gerrit-owners                                          	mdb/gn-gerrit-owners
+mdb:google-cla-gerrit-robot-accounts                          	mdb/google-cla-gerrit-robot-accounts
diff --git a/project.config b/project.config
index 15d6b4e..63f8d38 100644
--- a/project.config
+++ b/project.config
@@ -1,7 +1,7 @@
 [project]
 	description = Access inherited by all other projects.
 [receive]
-	requireContributorAgreement = false
+	requireContributorAgreement = true
 	requireSignedOffBy = false
 	requireChangeId = true
 	enableSignedPush = false
@@ -77,3 +77,10 @@
 [submit-requirement "Code-Review"]
 	submittableIf = label:Code-Review=MAX AND -label:Code-Review=MIN
 	canOverrideInChildProjects = true
+[accounts]
+	sameGroupVisibility = deny group google/google-union:signcla
+[contributor-agreement "Google CLA"]
+	description = Google Contributor License Agreement
+	agreementUrl = static/cla.html
+	accepted = group google/google-union:signcla
+	accepted = group mdb/google-cla-gerrit-robot-accounts