Generic whole-repository compliance audit against discovered rule sources. Use for periodic health checks, migration validation, pre-handoff compliance, or when asked whether a project follows its declared engineering contract.
