Many objects such as guard sub-policies, obligations, advice, etc. could be done as Pojos which could then support Bean Validation more easily than hammering it thorughout the code.