When including a policy that has a runlist defined the behaviour is for them to be appended to the beginning of your runlist. The intention behind this would be that your creating a policy for an application app1. OS team requires everyone to include their base policy for all servers and security team requires everyone to include their security policy for all servers. You'd want those runlists to run first then your runlist to finish configuring the server for your application.