Convert policy into testable checks
Content team: The content team records the prohibited broad claim, required administrator condition, accessible-name requirement, and evidence link in a rule record. It maps rules to the topic types they govern.
Depends on: Security and product owners authorize the permission rule; accessibility specialists define the acceptance criterion. The AI reviewer proposes semantic permission violations from the draft and approved policy; deterministic code handles exact tokens and required fields.