broke red_model.rb into several files (one for data model, one for event model, one for security model); some policy unit tests
implemented policy classes and policy/rule instantiation