A draft Policy Framework specification was published on www.osoa.org today, 11th September.
This specification describes the framework that will be used to attach policies to SCA assemblies to handle infrastructure capabilities such as Security and Transactions.
You can see the draft Policy Framework specification on the SCA Specifications page.