WAF Custom Rule Effectiveness Check

Answers one precise question: is this custom rule currently in effect for this protection object, and if not, which link is broken. Statically checks the configuration chain; sends no test traffic. WAF 3.0 only (waf-openapi 2021-10-01). Use when the customer reports "I configured the rule but it does not work / it should have been blocked but was not / CC does not trigger or the ban scope is too wide". Scope: user-defined rules with DefenseOrigin = custom (custom_acl / cc / rate limiting / scan / blacklist).

❗ Hard Constraints (highest priority in this document)

Interaction stance — confirm first, query second. Asking the customer for a required input that is missing or ambiguous, and then waiting for the answer, is correct behaviour in this skill — never a failure to act. Guessing an input, or querying around the gap, is the failure.