rules: - no-direct-internet-to-database - no-cycles - no-orphans - every-service-has-owner - production-has-observability - external-dependencies-have-timeouts - trust-boundaries-use-protocol