California just announced it'll start ticketing driverless cars that break traffic laws. That got me thinking — not about self-driving cars specifically, but about a problem I've hit on three different projects: how do you make an automated system respect a set of rules that change over time? Whether you're building a CI/CD pipeline that enforces deployment policies, an API gateway with rate-limit