Policy Studio

What a run may do, what it must preserve, and what it can never do. Every rule is shown with the layer that produced it, because the useful question about a blocked operation is which layer blocked it.