policy container
doc's policy container