Auto-suppress matching findings so they don't sit in the open queue. Every rule carries a mandatory reason — when a critical finding is missed, the audit trail answers "why?". Suppression is applied asynchronously by a 5-minute cron sweep; new rules can also back-suppress the existing queue on creation.
All matcher fields are AND'd. Pick at least one — an empty matcher would suppress every finding for the tenant and is rejected.
Create one above to silence low-noise findings. A 30-day expiry is a common pattern for migration windows.