An analysis of the improvements required on PDK v1 is included in https://doi.org/10.5281/zenodo.15506826 

Steps to getting started with Policies for a Collaboration

1. Define a unique name for your collaboration (recommend DNS) 
2. Identify a governance body to make policy decisions
3. We strongly suggest (although this is out of scope here) 
   1. Identifying your primary assets
   2. Completing a risk assessment
   3. Defining your rules of participation and the escalation procedure in case of non-compliance
   4. Any additional legal and regulatory compliance necessary
4. Define the purpose of your collaboration → this will be used for your AUP 
5. Review the AEGIS endorsed policy guidelines required for AARC compliance
   1. Identify your assurance requirements following https://aarc-community.org/guidelines/aarc-g031/ and ensure its technical implementation
   2. Token lifetimes
6. Define, or agree to adopt as is, the following 6 policies and seek endorsement from the governance body
7. Ensure that the policies are presented to and accepted by the relevant audiences
8. Publish your policies at a suitable location