chore: init vm-cc compliance scaffold

config/rules.yaml

@@ -0,0 +1,24 @@
+# Rule registry. Each entry binds a rule id to a source and evaluation script.
+# Keep rule definitions in 40-rules/; this file ties them to schedules and severity.
+
+rules:
+  - id: authority-hierarchy
+    severity: HIGH
+    entry: "40-rules/authority_hierarchy.yaml"
+    evidence:
+      - vm_mcp
+      - vm_ledger
+
+  - id: skills-health
+    severity: MEDIUM
+    entry: "40-rules/skills_health.yaml"
+    evidence:
+      - vm_skills
+      - ops
+
+  - id: receipts-schema
+    severity: HIGH
+    entry: "40-rules/receipts_schema.yaml"
+    evidence:
+      - vm_contracts
+      - vm_ledger