There's written policy and then there's policy as-enforced.