{
  "mode": "warning",
  "critical_rules_fail_immediately": [
    "ARCH-001",
    "ARCH-002",
    "FIN-001",
    "FIN-002",
    "STU-001",
    "COM-001",
    "EXT-001"
  ],
  "legacy_rollout": "scan-only -> warning -> changed-files error -> global error"
}