Pattern
Generate the policy from the enforced rule
Where a platform enforces a setting, produce the written policy from that configuration. Then the rule and the document cannot drift apart. Keep the enforced rule as the source of record, mark policy without enforcement as unenforced, and report how many policy statements are actually enforced.
The pattern
Claim: recommendation
Keep the enforced rule as the source of record and render the readable policy from it. Where no enforcement exists, mark the policy as unenforced. That is useful information.
The program can then report how many policy statements are actually enforced.