I assume you’re trying to throw the violation at the time of the request during an access request? If so are you seeing the logging statements hit the rule? If not there may be a change to the workflow that would normally trigger the policy violation rule to get checked.