policy checksum