A repository contains billing, mobile, and infrastructure code. The team wants general build guidance available across the repository, but payment-card guidance should apply only when Copilot works on PCI-related billing files. Evaluate the following statements. 1. The applyTo field scopes the PCI guidance to matching files. 2. Moving PCI guidance into copilot-instructions.md would make it narrower. 3. Content exclusion is a separate control for files Copilot should not use as context.

# .github/copilot-instructions.md

- Use pnpm for package management.
- Run pnpm test before proposing a pull request.
- Keep pull requests focused and small.
---
applyTo: "packages/billing/pci/**"
---

# .github/instructions/pci-billing.instructions.md

- Use packages/billing/pci/test-fixtures for card-token tests.
- Validate changes against packages/billing/pci/docs/tokenization.md.
- Do not apply these rules to mobile analytics code.