Constant BASE_ENTITY_ENDPOINT_RULES 

pub const BASE_ENTITY_ENDPOINT_RULES: &[(&str, EdgeRelation, &str)];

Base entity endpoint allowlist — the closed set of permitted entity→entity relation triples.

Each entry (src_kind, relation, tgt_kind) explicitly allows that combination. "*" as src_kind means “any entity kind” (used by instance_of whose source is unrestricted).

Pack rules (via EDGE_RULES) are additive — they cannot remove rows here. Exposed via base_entity_endpoint_rules() for the ADR-076 certificate tests.