The rules are reasonably clear but contain gray areas. First, the exclusion of the US and Israel is a critical constraint, requiring accurate attribution of the aggressor (e.g., Saudi Arabia, Azerbaijan, or Pakistan). Second, the method is strictly defined (airstrikes, missiles, drones), excluding interceptions, artillery, and cyberattacks. The primary risk lies in 'attribution': if a strike occurs without a public claim of responsibility, or if there is debate over whether it was a state actor vs. non-state actor, or a false flag operation, resolution could be delayed or contested.