Policies were mandatory, high-level requirements that, with rare exception, had to be followed.
Policies had to been followed and were high-level requirements.
Policies were just guidelines and could be ignored if wanted.