Conventions that linters can’t enforce — module depth, naming, folder structure, validation at boundaries — still need enforcement; make them auditable. Full write-up coming soon.