Application Control for Business, Schema Definition

Great article. First of its kind for ACFB. I am hoping you could expand on the Rules element as very little documentation exists for how it works. For example how do Rules work in a Deny Baseline vs Allow Baseline vs Allow Supplemental. I have questions like UMCI and Enabled:Dynamic Code Security interaction or having Audit in a Deny and allow Baseline, or Managed Installer in a Deny and Allow Baseline.
Thank you