ha-policy recipe