ISC has expanded the documentation for DNS RPZ somewhat, and we've published Format 3. Please take a look and let me know how this material can be improved further. https://deepthought.isc.org/article/AA-00525/110/Building-DNS-Firewalls-with- Response-Policy-Zones-RPZ