Policy ui

probably needs to rewind on update failure too..