In other words, 100% policy-as-code.
This includes
- Preventing UI authors or API user from changing policies outside the PaC path
- Driving system policies as codeĀ (there could be an easy workaround here such as clone+disable but this still needs to happen)