Rules Before Tools in Critical Infrastructure · HackerTrans