Each rule has a status:
enforced: must have no violations.ratchet: has known v1 violations; the count may go down but never up (the ceiling is stored ininst/extdata/validation/rule_ceilings.csv). When a ratchet rule reaches zero it should be switched toenforced.