Role-by-role flow: Platform Admin creates and publishes templates → Tenant creates policies from templates → Employees acknowledge.
Publishing a master template makes it available in every tenant's TemplatePicker — it does not create a policy on their behalf. Each tenant must:
If a template does not appear in TemplatePicker after import, restart the dev server to clear the unstable_cache and ensure the rule is marked isActive: true.