Thanks for this post. There is a policy in the example:
let policy_str = "(policy my_policy (and (or A B) (or C D)))";
However, only A and C are co-signers in Musig2 which spends onchain. I guess B or D could not authorize any spending alone. Does policy signer resolves Musig2 setup and generates valid partial signature instead?