Falco has been the canonical rule-based observer for k8s for years. Is Prempti reusing the Falco DSL or inventing a new one for the coding-agent context? The rule format ends up mattering more than the rules themselves — that part decides how usable rule-based becomes once it gets serious.