I cannot find a reason we decided for the "product_versions" field to be required in "gating.yaml".
It makes more sense for the product_versions to be inherited from the policy with the RemoveRule (i.e. the policy which initiated fetching the gating.yaml).
I've created issue for this: https://pagure.io/greenwave/issue/468