1 2 3 4 5 6 7 8
{ "id": "guards/cat-number", "match": { "program": ["cat"], "argv_contains_all": ["-n"] }, "action": "passthrough" }