# description
Schema for .provene/policy.yml (RFC 0002). Unknown keys are REJECTED everywhere: a security control that silently ignores a misspelled requirement reports green while enforcing nothing.

# properties.exemptions.items.properties.reason.description
Prose. Appears in check output; recorded in the aggregate receipt.

# properties.rules.items.allOf[].comment
RFC 0002 section 6: block rules must carry a remedy, and block/warn must carry a message.