diff --git a/groups b/groups
index 7ba8f8d..1d62219 100644
--- a/groups
+++ b/groups
@@ -1,9 +1,11 @@
-# UUID                                  	Group Name
+# UUID                                                  	Group Name
 #
-fc16cdd071c21660395862c7c23667cc38638aae	Core Team
-global:Anonymous-Users                  	Anonymous Users
-global:Change-Owner                     	Change Owner
-global:Project-Owners                   	Project Owners
-global:Registered-Users                 	Registered Users
-mdb:cerebra-hw                          	mdb/cerebra-hw
-mdb:cerebrahw-leads                     	mdb/cerebrahw-leads
+fc16cdd071c21660395862c7c23667cc38638aaea               	Core Team
+global:Anonymous-Users                                  	Anonymous Users
+global:Change-Owner                                     	Change Owner
+global:Project-Owners                                   	Project Owners
+global:Registered-Users                                 	Registered Users
+google:AI2Pq9r_ksT_hfUOny8swsG8krQwPL5eOM0hGHf4QWGOPdy9igqsdhs	google/google-union:signcla
+mdb:cerebra-hw                                          	mdb/cerebra-hw
+mdb:cerebrahw-leads                                     	mdb/cerebrahw-leads
+mdb:google-cla-gerrit-robot-accounts                    	mdb/google-cla-gerrit-robot-accounts
diff --git a/project.config b/project.config
index 29e3da2..03e9fc4 100644
--- a/project.config
+++ b/project.config
@@ -1,10 +1,17 @@
 [project]
 	description = Access inherited by all other projects.
 [receive]
-	requireContributorAgreement = false
+	requireContributorAgreement = true
 	requireSignedOffBy = false
 	requireChangeId = true
 	enableSignedPush = false
+[accounts]
+	sameGroupVisibility = deny group google/google-union:signcla
+[contributor-agreement "Google CLA"]
+	description = Google Contributor License Agreement
+	agreementUrl = static/cla.html
+	accepted = group google/google-union:signcla
+	accepted = group mdb/google-cla-gerrit-robot-accounts
 [submit]
 	mergeContent = true
 [capability]