Security Review Process Defaults: Review required for schema changes CI blocks merge on failures Schema validation mandatory