When to disavow
Don't disavow casually. Google explicitly says most sites should never need to use disavow — the algorithm handles spam well. Disavow only if you have a manual action notice, a clear unnatural link pattern from past SEO work, or signs of a negative SEO attack.
If you do disavow, only include links you're certain are harmful. Accidentally disavowing legitimate links can drop rankings overnight.