pulumi up does nothing, pulumi refresh does nothing, pulumi stack export shows the rules which don’t actually exist

This is interesting...

pulumi refresh

is the intended solution here. I assume you’re on AWS?

yes

Okay. I'll see if I can reproduce this.