You should consider carefully how your rule objects are created.
In particular, if you are using CER in your own application, you should decide early on which rule objects are created by your application code, vs. which rule objects are created by your rules.
See External and Internal Rule Objects for more details.