Kind: ruleset · Security: unscanned / not scanned

Non-negotiable operational rules — non-destructive defaults, artifact validation, gate checking.