app-ai-guardrails

Scaffold a greenfield app so the full guardrail canon is live in commit #1 and every one of the 7 gates is verified green before that commit exists. The canon is stack-agnostic; each stack's mechanics live in one adapter file. The differentiator is teeth: gates that fail on violations, not report-only tooling. You wire the canon, run every gate green, prove the tree is clean, then commit.

1. Scope