Skip to content

invalid_duration

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

An approval’s expires_in is not a duration, or is outside 1m to 7d. A duration is a whole number and one unit: s, m, h or d.

deedglass: policy/v1
name: refunds
defaults:
decision: deny
reason: No rule allows this action.
rules:
- id: large-refunds
match: { tool: stripe.create_refund }
decision: require_approval
reason: Refunds wait for a person.
approval: { approvers: [role:admin], expires_in: 2 hours }
✕ policy.yaml:11:54 · invalid_duration
expires_in: 2 hours is not a duration.
hint: Use a number and one unit: 30m, 2h or 1d (from 1m to 7d).

Fix:

approval: { approvers: [role:admin], expires_in: 2h }