[ca] fixed false alarms, new rules