Engine-agnostic AppSec baseline rules pack: a JSON-Schema rule contract, a Python CLI validator, and per-rule OWASP ASVS 5.0 / API Top 10 / CWE / NIST SSDF mappings for security review and CI evidence. Validates and exports rules; it does not execute them.
