Warning before blocking
The first version of any policy is wrong somewhere, and a tool that blocks commits on day one gets disabled by the end of the week. The default is to warn and record. Blocking is a flag you turn on per rule once you trust what the rule is telling you.