The assigner holds a move of a module of policy record, and only the controller knows a person's own choice of policy (ADR 0539 clause 14).
The node-engine applies only a composition signed by the controller or the operator, and when the controller cannot compose its own fix the operator composes, signs and writes one at the terminal (ADR 0539 clauses 3 and 10).