Sorry I have replied on discord. I will replicate the answer here:
Yes
/etc/crowdsec/postoverflows/s01-whitelist/sc-countries-whitelist.yaml
will work and will only be evaluated once a bucket overflows. Yes, postoverflows are not taken into consideration for cscli explain this is an open issue and is not available at the moment.