create policy.json