Fix bounds-checking in policy_summarize