Skip to content

cel_too_long

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

A when or measure is longer than 4,096 characters. A long expression is usually a long list of values written inline. A when of 5,281 characters gets:

✕ policy.yaml:9:11 · cel_too_long
This when is 5,281 characters; the limit is 4,096.
hint: Split the rule, or move a list into match.

Fix: move lists of tools or agents into match, where globs can shorten them, or split the condition across two rules.