it happens pre-fork so that we can cache it across runs as is the plan with all `@rule`s