Changes to sensitive parts of the code (authentication, payments, personal data) require an independent review -- human or automated -- before they are published

Pinned as it read in catalog v3.29.0 — the current version of this rule may read differently, see CH-GOVN-018.