Don't have everything as well documented as you'd like? Yeah, you and everyone else that we talk to.
But that shouldn't stop you - in fact, now it doesn't! You can add requirements or controls directly through our interface and they will automatically (1) generate policy as code for deterministic enforcement, (2) get deployed into your tenant for use by the MCP server and PR Review bot, and (3) allow edits, disabling, re-enabling with just a click.