Repository-specific guidance vs. plugin defaults.
Global plugin policy vs. project-specific rules, and how they combine.