CategorysafetyManual1.10Evidencedocumented
ProblemAlways allow is chosen early, when the workflow is least understood.
TechniqueUse Allow once while a workflow is new. Create an always-allow rule only after you can describe its exact scope and its safe failure behaviour. Never approve an action whose target or effect you cannot identify: ask for a plain-language explanation or a draft first.
Why it worksThe rule you save is matched against future actions you have not seen yet.
When to useEvery new workflow.