G-XXXXXXXX, UA-XXXXX-Y, GTM-XXXXX). Allowed full snippets must reference googletagmanager.com or google-analytics.com. Disallowed patterns: eval, document.write, inline network code (fetch/XMLHttpRequest), or usage of new Function. Save to apply.