I would suggest you first do a trace of the usage of the pulse so you can see in the trace the names of the various relevant rules. Many of these will be activities, data transforms, and section rules.
Using your first example of controlling attachments, use the information from the tracer (and also from "Live UI") to identify which section offers the ability to attach. See if the attachment UI is jacketed in a decision rule that you can either modify, or modify the target of the decision rule. Some of them target roles you can modify. Or they target a setting you can change, when the decision rule controls visibility of the UI element.
If that doesn't allow the granularity you need, see which of the sections, activities, or data transforms are not "final" rules, and in particular, see which ones are labeled "extension" rules since "extension" rules are explicitly intended for over-riding and modifying.