A company rule can only add care
Security teams can add their own rules. No rule, missing file or failed update can switch the protection off.
Sting Labs· 26 Sep 2026
The worry
Once a company can push rules to every laptop, the obvious fear is a rule that quietly loosens the guard, or a laptop that cannot fetch its rules and decides that means there is no guard at all.
How rules work
A company rule can name more things to watch, ask for a human to approve certain actions, or treat a folder as sensitive. It cannot turn a check off, and it cannot make an existing catch weaker.

In plain words
You can add locks to the gate. You cannot take the gate away.
When things break
If the rule file is missing, malformed, or the fetch fails, the laptop keeps the protection it already had. Failures fall toward less extra care, never toward less protection.



