Where the policy lives
Next to the suite, in one file. A policy in a person's head is not a policy, and a suite without rules drifts within a month.
How to keep the policy true
The policy is checked by the same gate that runs the suite. A tier marker missing on an assertion fails the gate, so the rules cannot silently rot.