Reading and changing a gate

A policy is a small, legible rule: it reads the findings and decides allow or deny. You change the rule by changing the file, then testing it. Key points:

• Because policy is code, it is reviewed and version-controlled like any other code, and the bundles ship with their own tests.
• Changing a threshold is a code change with a diff and a history, not an invisible setting.