Rule code File glob (optional) Path scope (optional) Owner Expires Kindexceptionexception (suppress rule)override (mask a shared model) Sanctioned (allowed by policy) Shareable (uncheck = local-only) One-time use (re-argue if reused) Reason