I mean. Where should I put it in the createPolicy function? or is it "combined", as long as I return a boolean