Skip to content
deedglassdocs

cel_undeclared

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

An expression uses a name that is not one of the policy variables: tool, args, request, sql, agent, user, session, org, time, usage and anomaly. There is no now(); use time.now.

deedglass: policy/v1
name: refunds
defaults:
  decision: deny
  reason: No rule allows this action.
rules:
  - id: small-refunds
    match: { tool: stripe.create_refund }
    when: arg.amount <= 5000
    decision: allow
✕ policy.yaml:9:11 · cel_undeclared
  Unknown name "arg".
  hint: Did you mean "args"? Available: tool, args, request, sql, agent, user, session, org, time, usage and anomaly.

Fix:

    when: args.amount <= 5000
Section titled “Related”