A repository administrator configures review controls for Copilot-created pull requests. The organization wants low-risk documentation changes to be lightweight, but changes to authentication, deployment, or compliance-scoped code must require human review and passing checks before merge. Evaluate the following statements. 1. The policy treats secret-backed workflow execution as requiring human intervention. 2. High-risk paths are allowed to bypass pull request review when tests pass. 3. The configuration separates lightweight documentation changes from higher-risk code paths.

ruleset: production-main
target: main

pull_request_rules:
  require_pull_request: true
  required_approving_reviews: 2
  require_code_owner_review: true

required_status_checks:
  strict: true
  checks:
    - build
    - test
    - codeql

copilot_workflow_policy:
  allow_unreviewed_workflow_runs: false
  require_human_approval_for_secret_access: true

path_risk_classification:
  low:
    - docs/**
    - .github/ISSUE_TEMPLATE/**
  medium:
    - src/**
    - tests/**
  high:
    - src/auth/**
    - infra/deploy/**
    - compliance/**