Function requires_verification_rules 

pub fn requires_verification_rules(run_ref: &str) -> bool

Whether a workload is REQUIRED to declare verification rules.

True for anything under an examples/ directory: those files are the documented, CI-gated surface, and one arriving without rules is a regression in the documentation itself. Everywhere else rules are optional — an unruled workload is skipped, not failed.

Path-component matching, not substring: a workload at /home/me/examples-scratch/w.yaml is not under examples/, while /repo/examples/optimizer/w.yaml is.