{
  "schema": "MKN028_VISIBLE_CHECK_RULES_v1",
  "rules": [
    "purpose and reviewer authorization/basis must be explicit",
    "approved fields must be a subset of purpose-allowed fields",
    "each approved field needs a minimum-necessary reason",
    "excluded requested fields must have a redaction rule",
    "package and annotations bind the immutable source snapshot",
    "annotations may not write into canonical source facts",
    "expiry may not exceed the authorized expiry without governed revision",
    "onward sharing requires explicit authorization",
    "access and audit events are required",
    "revocation must invalidate package access",
    "transfer grants are recomputed independently and never union scope"
  ]
}