The base enforcement tier: centrally managed rules for zones, roles and test-first requirements, applied deterministically across the write, commit, CI and merge stages of AI-assisted development.