Policy to limit when packages get updated for org, so that if a newly-released package has vulnerabilities or malware, you're not instantly hit with it. Let's say you can set a 7 day package age minimum before it gets promoted for your org as available