Skip to content
deedglassdocs

approvals_unsatisfiable

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

An approval needs more approvals than the people it names. When every approver is a user:, required can be at most the number of distinct people, or no action could ever be approved.

deedglass: policy/v1
name: refunds
defaults:
  decision: deny
  reason: No rule allows this action.
rules:
  - id: large-refunds
    match: { tool: stripe.create_refund }
    decision: require_approval
    reason: Refunds wait for two people.
    approval: { approvers: ["user:priya@acme.com"], required: 2 }
✕ policy.yaml:11:63 · approvals_unsatisfiable
  This rule needs 2 approvals but names only 1 person.
  hint: Lower required, or add people or a role to approvers.

Fix:

    approval: { approvers: ["user:priya@acme.com", "user:sam@acme.com"], required: 2 }
Section titled “Related”