What is the legal basis for enforcing release policies at ASF?

Hi!

while answering a question on release policies and ALv2
I've suddenly realized that I really don't know what is the
legal basis for enforcing release policies we've got
documented over here:
   http://www.apache.org/dev/release.html

For example, what would be the legal basis for stopping
a 3d party from releasing a snapshot of ASF's project
source tree and claim it to be a release X.Y.Z of said
project?

Thanks,
Roman.