What does an AI policy actually look like?

“Rules in plain English, written by whoever owns the risk: a list of actions with an autonomy level against each one. In the vendor-review agent behind Mountain Theory's published run, every action the agent can take sits in one of four levels.”