Your team uses pull requests targeting the main branch in Azure Repos. A branch policy requires a minimum of two approvals. Reviewers frequently approve a PR, and then the author pushes additional commits that change the code substantially before merging. Auditors have flagged that approvals granted on earlier code are being carried forward to the final merged code. You must ensure that any new commit pushed to the source branch invalidates existing approvals so reviewers must re-review the latest changes. Which branch policy configuration should you enable?