Multi-party transactions require a policy language to express security requirements and resolve security assertions accordingly.