policy: mode is always an array