We need to be able to fetch new “keys” from upstream projects and identify which rules are not yet defined in our repo.