C15.a8 - The system must provide a Flask-based REST API with endpoints for dynamic policy creation.