Rule enhancement should start with demonstrating how the vulnerability works

This ensures full understanding of what needs to happen in the pattern and will prevent duplicate work.