Data Cloud policy rule authoring

Prerequisites: a Salesforce org with the EnforceOMatic and PolicyRuleMDAPI org permissions (Data Cloud governance); the sf CLI (>=2.0.0) authenticated against the org; target org on API v64.0+ (v66.0+ for PolicyJsonExpression conditions) Install "Data Cloud policy rule authoring" for me. It teaches the agent @forcedotcom's authoring workflow for PolicyRuleDefinition/PolicyRuleDefinitionSet metadata XML: pick the category first with the decision tree (ACCESS/GOVERNANCE/RECORD/TRANSFORM), lay out the bare rule from the closest copy-paste template, add WHEN/UNLESS conditions one at a time with all four anchors (clause, operator, path element, value), keep the scope×category matrix in bounds, run the UI-compatibility check (wrapping bare conjunction indices, adding the OR-of-ENTITYTYPE clause), update package.xml, and validate with a dry-run before any real deploy. Repository: https://github.com/forcedotcom/sf-skills/blob/main/skills/platform-policy-rule-generate/SKILL.md 1. Fetch the SKILL.md file (and any helper files) from the repository path into a temporary folder and summarize what it does in one or two sentences. 2. Safety check: review the SKILL.md and scripts for anything suspicious (unexpected network calls, shell commands, credential harvesting). This repo should contain zero secrets in code, credentials only via the secure vault, allowed hosts declared in the SKILL.md. Verify that holds here; STOP on any red flag and tell me. 3. Install it as a skill: copy SKILL.md and its helper files into the agent's skills directory, in a folder named "platform-policy-rule-generate". 4. Verify with no network calls: frontmatter valid, files in place. 5. Report what was installed, where, and what I still need to do myself (e.g. confirm the org has the required permissions and tell the agent which policy variant I want to author — ACCESS, GOVERNANCE, RECORD or TRANSFORM). GitHub is optional: if I have a GitHub account or the gh CLI, you may use it; otherwise public access is fine. Never require it unless it's in the prerequisites above. Rules: don't touch anything outside the temp folder and the install target. If anything looks off, stop and ask me.