Before implementation or review work, follow the public JST architecture contract and organization governance. Keep policy normalization independent from ESLint traversal, make every convention configurable through the public policy API, and add the smallest adversarial test that proves each rule cannot be bypassed. Run npm run check before delivery.