Zero-Trust rules evaluated top-down by priority — first match wins. See it in action in Access Explorer.