[ca] new rules, fixed false alarms