Derived-field backfill

Backfilling one derived field woke a dormant rule that fired eight times with zero true positives

The rule had real callers and fired on every invocation, but the field it compares against had no writer anywhere in the repo, so backfilling it was the only way to learn what it would have flagged.