policy_reports lists only Assets with the ArfReport
comply_with lists only Assets that comply with given policy

In other words, Assets whose last arf_report complied.