For debugging purposes, we find it helpful to add `debug` statements when the resource does not converge. Something like:

```ruby
if run_exists?
  Chef::Log.debug "Rule #{rule} already allowed - skipping"
else
  converge_by("Allowing #{rule}") do
    # ...
  end
end
```

This really helps when debugging issues with the cookbook. Would you mind updating your actions to follow this kind of pattern?