The runtime policy loader enforces canonical policy schema v1 and supports an explicit legacy migration path.
- accepted without migration:
schema_version: 1, - accepted with explicit migration:
schema_version: 0(migrated to v1), - rejected fail-closed: unknown schema versions and unknown schema families.
Unknown schema versions are never defaulted, partially loaded, or heuristically migrated.