rules: rules must be executable