Falco has been the canonical rule-based observer for k8s for years.
Is Prempti reusing the Falco DSL or inventing a new one for the
coding-agent context? The rule format ends up mattering more than
the rules themselves — that part decides how usable rule-based
becomes once it gets serious.