Assess native rule eligibility with explicit evidence gates

config/rule_eligibility_manifest.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": 1,
+  "corpusKind": "WELA extracted Hayabusa metadata; not complete upstream Sigma",
+  "corpusSha256": "edffff132db9c9cd53d51db62b5bf7f9459d8bdcbbcac6ada806b2ca7881297f",
+  "mappingSha256": "fdb14ec0ff00a9bd1d5bb020102b9c8be9880edf241e9e5f24212af4dfa18436",
+  "recordCount": 2532,
+  "uniqueRuleCount": 2532,
+  "rulesRepository": "https://github.com/Yamato-Security/hayabusa-rules",
+  "rulesCommit": null,
+  "generatorRepository": "https://github.com/Yamato-Security/WELA-RulesGenerator",
+  "generatorCommit": null,
+  "metadataLimitations": [
+    "Detection expressions and required fields are absent.",
+    "Missing historical upstream revisions are unknown; file hashes pin the available inputs.",
+    "Channel/EventID/GUID candidates do not prove native field support, outcomes, ingestion or query execution."
+  ]
+}