A policy assigned at the wrong scope is benign. A policy with a typo in the condition silently fails to enforce anything. A DeployIfNotExists (DINE) policy without the right managed identity permissions creates remediation tasks that queue forever without executing. Azure Policy is the most capable …