Dry-run mode — show what would be intercepted without prompting

[Cod3ddy]

A --dry-run flag (or subcommand) that prints which rules would fire for a given command invocation without actually running anything. Useful for testing a new watchlist rule before committing to it.