A generated authorization check passes existing tests, but the developer cannot explain why it denies access to another tenant. What should happen before the change is approved?

1. Add the generated explanation as a code comment and retain the existing tests.
2. Approve the change if Copilot provides a confident natural-language rationale.
3. Trace the tenant checks and add cross-tenant tests until the reviewer can justify the authorization behavior.
4. Move the check into a shared helper so its behavior is less visible in the feature code.