policy validation