sg-pii-rules v0.2.0

Four new kinds of Singapore personal data and one specification change, reviewed and approved by Michael Mendoza on 2026-10-06. Vendored files are byte-identical to v0.2.0-rc.1, so existing SHA256SUMS checks stay valid.

Entity	What it finds
CARD	Card numbers passing the Luhn check with a card network's prefix and length (ADR 0009)
POSTAL	Six-digit postal codes after an address clue, valid sector 01–82 except 74 (ADR 0011)
UNIT	#floor-unit numbers such as #05-123
DOB	Real calendar dates directly after a birth clue (ADR 0012)

Specification: a pattern may name one value group; only it is reported, the rest is required context (ADR 0010). Implementations must support it for the POSTAL and DOB fixtures.

Evidence: 369 conformance cases passed by two independent implementations (TypeScript reference, Discreet in Go); measurements on 36 MB of real code in EVALS.md; CV numbers in docs/CV-NUMBERS.md.