A Formal Model of Policy Reconciliation | IEEE Conference Publication | IEEE Xplore