{% extends "base.html" %}
{% block title %}Rules · AICAudit{% endblock %}
{% block page %}rules{% endblock %}
{% block content %}
  <h1 class="page-title">Rules <span class="muted small">({{ rules|length }})</span></h1>
  <p class="page-sub">Every security rule is taint-aware where it matters: provably-constant inputs don't fire; traced sources carry a full path.</p>

  <div class="card">
    <input class="input" id="rule-search" placeholder="Filter rules…" autocomplete="off">
  </div>

  <div class="card mt">
    <table class="tbl">
      <thead>
        <tr><th>ID</th><th>Name</th><th>Severity</th><th>Description</th></tr>
      </thead>
      <tbody>
        {% for r in rules %}
        <tr data-rule-row="{{ r.id }} {{ r.name }} {{ r.description }}">
          <td class="mono"><span class="badge brand">{{ r.id }}</span></td>
          <td class="mono">{{ r.name }}</td>
          <td><span class="badge {{ r.severity }}">{{ r.severity }}</span></td>
          <td class="muted">{{ r.description }}</td>
        </tr>
        {% endfor %}
      </tbody>
    </table>
  </div>
{% endblock %}