One chokepoint, a fixed match order, the maximum decides

changed files renames count old and new path
one chokepoint normalize path strip ./ · reject ..
match order tier2 → tier0 else tier 1, the default
Tier 2protected
Tier 0neutral
Tier 1everything else
no averaging down tier = max over files one Tier 2 lifts the whole PR
the gate globs from base branch