application policy spec