Regulatory obligations evaluated for a specific company

Returns every regulatory obligation the Universal Rulebook evaluates for a Norwegian organisation, one EvaluationResult entry per rule whose entity_types[] matches the company's entity_type. The response carries all three verdicts side-by-side so agents can see the full picture: applicable (every condition matched — the obligation applies), not_applicable (at least one condition failed — the obligation does not apply), and insufficient_data (a Tier 2 field the rule reads is null or the Tier 2 block is absent — the agent should surface a delegation path rather than decide yes/no). Do not filter server-side; agents filter client-side if they want a narrower view. data_tier is tier_2 iff a Tier 2 delegation is active AND the Registry has populated Tier 2 fields; tier_1 responses will carry insufficient_data for every rule whose conditions reference a Tier 2 field, and upgrade_path carries a Norwegian call-to-action pointing at the Altinn delegation flow. When data_tier is already tier_2, upgrade_path is null. Only rules whose citations have been human-verified against Lovdata (a required database migration — legal_reference_verified_at IS NOT NULL) reach this endpoint; unverified rules stay in staging until a human confirms them.