restrict core ruleset