The initial "rules" are typically established by the creators, developers, or governing bodies behind the project.

Post-launch changes and improvements are proposed and developed by the community.

Then after passing some consensus mechanism the changes get merged into the main repository by the maintainers to permanently update the protocol, the "rules", if you will.

At least, that's how I understand open protocols to work.