Then there's one in

<http://nodes.rs|nodes.rs>

, which I have to assume is tracing every rule?

yep. and regarding this, see: https://github.com/pantsbuild/pants/issues/7907