NACK.
If you would like to work on real policy evaluation, there are projects that we can hook you up with.
There is a lot more to policy evaluation than what this proposal is and incorporates more work than the
members of this project have time for. This problem is being worked on in other spaces and has standards
being developed around them which the proposed format doesn't take into consideration.
This is major scope creep to the purpose of this repo which is about security scanning and remediation of content
and will fundamentally break our downstream users. This project is not positioned to correctly tackle policy
evaluation and is going to slow down our release and build process even further. This is also a roadblock to getting
the requests that current customers are demanding completed. There are other higher priority upstream tasks
that have received no attention in OpenSCAP, SCAP Workbench, etc. repos. Those need to be dealt with and
completed first.