As a counterpoint, what fraction of the future engineers who will touch the project are likely to be able to competently edit the finite automata based version without introducing bugs and what fraction will be able to competently edit the if statement that checks the particular policy?

A further question mark is whether any of this has sufficient instrumentation to be able to notice and act on a change of and when it occurs.