The following points are discussions about the policy, either because they have to be studied more, or are controversial.
Name and existence of the repository. It was removed in the latest version.
The symbolic links in /usr/share/java be made by a script instead, similar to the c-libraries.
Core classes (java.*). More study needed.
Sun's Community Source Licence. Can we use it? How? The 2.3 version of the text can be found here.
All jars must have a good CLASSPATH documentation, but how should it be documented. The best solution is probably in some computer parsable format to make it even easier for the developer.
It should exist some tool to parse this. How should it work?
Should the tool also be used to create the necessary symbolic links needed by servlets under tomcat?
Should there be a default CLASSPATH, similar to a repository? Which jars should be included in that? A standard and one optional part? If there are a default CLASSPATH (in the wrapper) how should it be overridden?
How to check for a good enough jvm, and to select a proper one to use. Are /etc/alternatives not good enough?
Should the jvm internal classes be possible to override entirely and how?