WDAC policy ignored

[mskirl]

Generated a non-signed MPF policy and copied to the C:\Windows\System32\CodeIntegrity\CiPolicies\Active directory and it gets activated. Same policy moved to the EFI partition gets evaluated, according to eventlog, but 3103 ignored. Is there a way to debug the reason for the ignore ? Any idea, what might be wrong ?
Deploying a non-signed SPF to EFI via GPO works

[HotCakeX]

Only signed policies go to the EFI partition. Use the CiTool.exe for deploying CIP files, it automatically chooses best place to deploy the signed/unsigned CIP files.