# SPEC.md — Canonical Specification Pointer

The normative specification for the ATR rule format lives at:

- **[ATR-SPEC-v1.md](ATR-SPEC-v1.md)** — Rule format and evaluation semantics (v1.0, Draft)
- **[ATR-FRAMEWORK-SPEC.md](ATR-FRAMEWORK-SPEC.md)** — Multi-layer detection framework design (v2.0)
- **[spec/atr-schema.yaml](spec/atr-schema.yaml)** — Machine-readable YAML schema (authoritative for validation)
- **[docs/schema-spec.md](docs/schema-spec.md)** — Schema field reference

This file exists so that links to `SPEC.md` resolve to a single canonical entry point. All normative claims live in `ATR-SPEC-v1.md` and `spec/atr-schema.yaml`. Where the prose and the YAML schema disagree, the YAML schema is authoritative.
