Unique within ONE detection payload and nothing more. Never persist it as an identity.
The vendor property key of the field the rule conditions ON, when one could be read.
The vendor property key of the field the rule acts on, when one could be read.
What the rule says, as text a reviewer can judge — the vendor's words, or compact JSON.