Hello @gconway   I got through the same issue moving the read-only condition from the variable to a  catalog UI policy