When should code review block a merge?

Block a merge for correctness defects, security risk, broken tests, unreadable ownership boundaries, or missing coverage around risky behavior. Style-only feedback should usually be non-blocking if the project formatter already enforces standards.