ai-policy: disallow