Principals make the rules

A policy is a record of a rule. Rules help people make decisions without asking for permissions first.

All X should Y, otherwise Z.

A rule is a decision.

Trusted agents can write the words, but principals make the rules.