CAIN-INV-1197: Local copy of the gateway's tool-rule matching, for the local checkpoint

VERIFIED source compiles

Domain	ADVERSARIAL_AND_INJECTION_DEFENSE
Tier	ENGINEERING_INNOVATION
Source	`sdk/python/src/cainstudio/_rules.py`
Mapped tests ran	33
Passed / failed / errored	33 / 0 / 0
Compiles	yes

Mapped tests

sdk/python/tests/test_local_checkpoint.py

Generated 2026-10-06T19:15:35Z from git unknown. This page is a republication of the run result; it is not an independent audit.

Same-project verification only. The tests are authored in this repository; no third party has reviewed or reproduced these results. VERIFIED means the mapped tests passed in this run, not that the mechanism is independently correct.