deny txt
allow txt2
cat -> allow txt

default posture = block

// allow all file,

deny txt,
allow txt2,

cat {
// global import
// allow all file, 

// deny txt, removed due to conflict resolution
allow txt2,

// from source specific rule
allow txt,
}

deny txt
allow txt2
cat -> allow txt

default posture = audit

allow all file,

deny txt,
allow txt2,

cat {
// global import
allow all file, 

// deny txt, // not removed
allow txt2,

// from source specific rule
allow txt,
}