policy for upstream-sync