Narrow Auto Review rules bound to an action and a scope

ProblemBroad rules such as allow everything in the browser age badly, because websites and tool behaviour change.

TechniqueWrite rules bound to a known action and scope, for example require approval before sending any external email, or always allow running git status in /workspace/reports. Remember Require Approval wins whenever both kinds of rule match.

Why it worksAlways Allow only lets an action proceed when the automated review finds no independent reason to stop, so an allow-list entry is a preference and not a guarantee.

When to useSettings, General, Auto-review.