The specification lets developer, compliance, and security teams define their own policies for agents to follow in portable policy files.