Are manually added security group rules removed by the controller?

If a user manually alters security group rules created by the controller, are those changes reverted automatically?

I am particularly interested if the controller _removes_ rules that are added manually.

If so, how quickly?

Start by tracing the controller's security-group reconciliation behavior and checking how it handles rules added manually. Confirm whether those rules are removed and determine the expected reconciliation timing; document the answer for the scenarios described in the issue.

Written by the indexing model from the issue text.