Policy capturing and two level specifications of policies for human and software processing