Dependency policy 2.0

As discussed on the mailing list.