Language policy tiers (Go/PHP/C/Java only for our code; Rust tools OK; python avoid-but-OK in supply chain; node last-resort with consult), dev-in-docker rule, availability-tracking prohibition.
