What happens if someone attempts a malicious policy change?

From an insider, new policy are submitted for review and placed in ‘lock down’

From an outsider, crypto seal