In using these labelsets to perform decisions on whether to authorize or deny a flow of information, the policy framework may make use of a relatively simple group of set-theoretic rules built from the source and target labelsets using the set union, intersection, and complement operations.