Restrict nodes to map to new policies

Hi,

We have adopted policies and are now trying to work out a model to bootstrap nodes with a configured policy name and group. Is there a way to restrict and ensure that node once mapped to a specific policy doesn’t get changed to a different one?

Thanks
Suman