it seems that the merge(?) step might be too "aggressive" -- when running with the following policies:
Customers with "regular" membership cannot book a flight with more than three passengers unless they own at least 200 frequent flyer points.
Customers with "silver" membership status cannot book a flight with more than seven passengers.
When modifying a reservation, only increasing the number of passengers is allowed.
modify_reservation() addresses policies to some extent, but book_reservation() is empty:
book_reservation.json
modify_reservation.json
oas.json