Provenance controls for rules and facts