AutoDrive

Safety rails are active. New rules are created disabled by default — toggle them on after preview. Ingest-path execution is also gated by the ENABLE_RULES_EXECUTION server flag (use the Preview button on a rule to confirm).