How many complexity violations does your policy allow? I just have an 888 box available at the moment, but in this offset i can observe that "Paul2019" gets rejected due to attribute exclusion (as opposed to violation of 2008 policy rules). Once i set allowed violations down to 0 i still get "Paul2019" rejected due to attribute exclusions but also can't set "Pau2009", the latter one due to violation of 2008 rules.