First matching rule wins — set the priority carefully.
Exact domain or wildcard prefix.
Lower number = evaluated earlier. Current rules use 10–50.