diff --git a/gerrit/acls/nebulous/zuul-jobs.config b/gerrit/acls/nebulous/zuul-jobs.config
new file mode 100644
index 0000000000..cf30488cb4
--- /dev/null
+++ b/gerrit/acls/nebulous/zuul-jobs.config
@@ -0,0 +1,10 @@
+[access "refs/heads/*"]
+	abandon = group nebulous-zuul-jobs-core
+	label-Code-Review = -2..+2 group nebulous-zuul-jobs-core
+	label-Workflow = -1..+1 group nebulous-zuul-jobs-core
+
+[receive]
+	requireChangeId = true
+
+[submit]
+	mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 60ed6f8e71..8cdd05cdf9 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -217,6 +217,9 @@
 - project: nebulous/project-config
   description: >-
     The Zuul CI's config project repository for the NebulOuS tenant.
+- project: nebulous/zuul-jobs
+  description: >-
+    NebulOuS project's Zuul jobs (non-config).
 - project: opendev/afsmon
   use-storyboard: true
   groups:
diff --git a/zuul/main.yaml b/zuul/main.yaml
index cfb268c754..97df1254d8 100644
--- a/zuul/main.yaml
+++ b/zuul/main.yaml
@@ -100,6 +100,7 @@
         untrusted-projects:
           # Order matters. Thus, list common job repos first.
           - zuul/zuul-jobs
+          - nebulous/zuul-jobs
           - nebulous/nebulous
           - nebulous/component-template