Skip to content
deedglassdocs

cel_syntax

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

A when or measure is not valid CEL. The hint covers the two most common slips: = instead of ==, and and, or or not instead of &&, || or !. An expression nested more than 64 levels deep gets this code too.

deedglass: policy/v1
name: refunds
defaults:
  decision: deny
  reason: No rule allows this action.
rules:
  - id: exact-refund
    match: { tool: stripe.create_refund }
    when: args.amount = 5000
    decision: allow
✕ policy.yaml:9:23 · cel_syntax
  Syntax error in when: unexpected token '='.
  hint: Compare with ==

Fix:

    when: args.amount == 5000
Section titled “Related”