Principals make the rules
A policy is a record of a rule. Rules help people make decisions without asking for permissions first.
All X should Y, otherwise Z.
A rule is a decision.
Trusted agents can write the words, but principals make the rules.