SpotUs Compliance Engine

G0 scaffold. Decision API (§5) arrives in C4.