Implicit deny?

[Sarah_Janson]

While writing entries for XOS, are we assuming there is an implicit deny or do we need to explicitly express denies?

[Stephane_Grosje]

ACL: implicit permit
Routing Policies: implicit deny if no match, but implicit permit if there's a match, but no action defined.