does the policy as code aspects only apply to values known (at preview) time?