incident-readiness rules to reflect changes in the framework definition

[prasoonanand124]

Summary

incident-readiness rules to reflect changes in the framework definition.
Moved 2 Mandatory checks to recommended

Type

Select all that apply:

• Check / catalog YAML (packages/aprf-engine/rules/)
• Published spec (spec/aprf-spec.json) or JSON schemas
• Engine / framework package code
• Auditor skill (skills/aprf-auditor/)
• Docs / RFC / governance
• CI / tooling

Test plan

• npm run validate
• npm run build
• Other:

Checklist

Always

• CI-equivalent checks pass locally (npm run validate at minimum)
• Focused PR (one concern when practical); RFC linked if normative semantics change
• [Unreleased] in CHANGELOG.md updated when user-visible

If Check YAML changed

• Regenerated and committed packages/aprf-engine/src/generated/catalog.ts (npm run aprf:catalog)
• Spec synced where catalog is SoT (spec/aprf-spec.json method / requirement / passCondition as needed)
• No reused Check IDs; deprecations use replacedBy
• Titles keep obligation language (must / should / must have / should have); no ... / … truncation

Scope

• Product-only / cloud-vendor detectors and live API clients stay out of normative Check YAML (portable auditor collectors under skills/aprf-auditor/ are OK)

[prasoonanand124]

Review follow-ups

Addressed in 519f41c / fd25042:

1. INC-M3/M4 deleted without deprecate stubs — Documented intentional pre-release exception (no tagged versions yet) in id-gaps.md and ratified by APRF-RFC-0002 (INC-M3→INC-R2, INC-M4→INC-R4). Linked from README / ARCHITECTURE / CONTRIBUTING / CHANGELOG.

2. INC-R2 PASS without sev count — PASS now requires sevEligibleIncidentCount > 0 (omit → PARTIAL; 0 → N/A). Smoke updated.

3. INC-R3 PASS without timestamps — PASS now requires timestampsPresent === true. Smoke updated.

4. Useless statusHint assignment (code-quality) — Initializer removed on the six incident collectors; branches still assign explicitly.

Happy to tweak RFC wording if stewards want in-review instead of accepted for the 14-day window.