Governance rules that keep the codebase safe and handover-ready. In-repo rules are auto-verified; GitHub host rules are confirmed manually.