Confirm drush is reading policy file
The file examples/policy.drush.inc contains a drush_policy_pm_update_validate hook. If drush pm-update, gives you the message "This codebase is assembled with Composer instead of Drush. [...]" you know that Drush uses the file.