Policy-compliant update checking