Doesn't have to be rules, just a guide and companies who comply and those who don't.
For an example how this could work, see the CFA and GIPS. Every big asset manager is in compliance with GIPS. Every reputable startup should choose whether to be compliant with best practices for equity for employees.