Treat SOC 2 policy reviews like failing tests

· Dev.to