policy flaw