As we saw in the previous chapter, in a centralized data policy, any packet that does not match a sequence is dropped by default (unless you explicitly change the default-action at the end).
Application-aware routing (AAR) works differently. If you do not configure a default action, any traffic that does not match a sequence is accepted and forwarded using normal VPN routing, with no SLA-based decision at all. This is why Application-aware routing is considered a positive policy.