Rule administration & approval

Every rule carries ID, description, version, owner, rationale, severity logic, test cases, and approval status. Rule changes follow a governed, audited approval workflow.