hey so my guess was right it will take decisions by itself I can see the smart mode is the best mode because this mode shows how smart REHIPS is everything is covered by that HIPS.
Standard Mode. It's mostly similar to Expert Mode, but shows less alerts. It doesn't show alerts in the following situations:
-It honors Trusted Vendors list, allowing processes and allowing children of these processes with inspection.
-When file is changed and signed by the same vendor as before, it's allowed.
-Children of immersive (metro, modern UI, whatever they're called) programs are allowed.
-Children of already isolated programs are allowed.
-Children signed by the same vendor as parent are allowed.
-Immersive (metro, modern UI, whatever they're called) programs are allowed.
-Subprocesses of already isolated programs are allowed.
the nice rules smart mode has

change the name to smart mode instance of standard mode:

you need to add these words into the help file because it's very useful
thnx for your time and answer.