The specification lets developer, compliance and security teams define their own policies for agents to follow in portable policy files.