How Much of Your API Do Your Rules Actually Check?

I have been walking through the governance tools I am building under API Commons one at a time, and today I want to sit with a question that most governance conversations never get around to asking. You have a ruleset. You run it against your API and it comes back green, or with a handful of warnings you can live with.