1. A computer-implemented method for managing the configuration state of a target entity, comprising: receiving a plurality of policy rules applicable to the target entity; constructing a logical directed graph of the policy rules based on relationships between the policy rules; and determining which policy rules are in effect and which are not in effect in an order specified by the logical directed graph.