How exactly does `safe-settings` handle situations that require human involvement?

I've read through the README multiple times, but it's not very obvious to me what exactly `safe-settings` does for some validations which can't just be applied to a repository. For example, what happens if a repository name doesn't pass the validation regex? Does `safe-settings` open an issue on the repository? Does it fail a status check on a pull request to force compliance? How do repo maintainers get notified of the issue and how can they learn what's failing?

Is there an example public org where this app is running on and could showcase how it works? Without understanding more of how this app works, I don't want to just install this on an organization.