Detection content as code: reviewing a change the way you review software

Rules edited in a console have no review or history, so coverage erodes without a record.