chore(work): finish 03-policy-templates

docs/work/epics/compliance-docs-scaffolds/03-policy-templates/_story.md

@@ -3,12 +3,12 @@ id: 03-policy-templates
 epic: compliance-docs-scaffolds
 title: Write seven policy templates in docs/compliance/templates/
 type: user-story
-status: in-progress
+status: done
 feature: ~
 depends-on: []
 blocks: [04-pre-launch-compliance-checklist, 05-compliance-overview]
 created: 2026-05-20T12:00:00Z
-updated: 2026-05-20T12:16:37.233Z
+updated: 2026-05-20T12:21:53.062Z
 ---
 
 ## Goal
@@ -48,4 +48,4 @@ A downstream consumer preparing for a DPA audit currently writes organizational
 ## Tasks
 
 - [x] Create `docs/compliance/templates/` and write `incident-runbook.template.md` + `dsr-procedure.template.md`: both anchored with YAML frontmatter (`status: template`, `playbook-section`), procedure skeleton cross-referencing real ADRs/commands/interfaces/endpoints, and `[FILL IN:]` markers for org-specific values; commit as `docs(compliance): add anchored policy templates (incident-runbook, dsr-procedure)`.
-- [ ] Write `backup-policy.template.md`, `password-policy.template.md`, `device-policy.template.md`, `onboarding.template.md`, and `offboarding.template.md` in `docs/compliance/templates/`: each with YAML frontmatter, the "not code-enforced" banner (password-policy's banner cites ADR-025 MFA/lockout deferral by number), and `[FILL IN:]` markers throughout; commit as `docs(compliance): add skeleton policy templates (backup, password, device, onboarding, offboarding)`.
+- [x] Write `backup-policy.template.md`, `password-policy.template.md`, `device-policy.template.md`, `onboarding.template.md`, and `offboarding.template.md` in `docs/compliance/templates/`: each with YAML frontmatter, the "not code-enforced" banner (password-policy's banner cites ADR-025 MFA/lockout deferral by number), and `[FILL IN:]` markers throughout; commit as `docs(compliance): add skeleton policy templates (backup, password, device, onboarding, offboarding)`.