Can we have valid paths and hide them, too? 4's policy (for "valid paths"): 3 preferred, 2 backup 3's info-flow: Don't accept prefixes smaller than /23 A's path to D violates policy conformance.