Policy Management vs Enforcement for AI Agents