Skip to content
deedglassdocs

invalid_glob

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

A pattern in match (or in a glob() call) is not a valid glob. Globs use * and ? only, with letters, digits and _ . : -; they are at most 200 characters and never empty. An agent: entry that starts with agt_ must be a whole agent id.

deedglass: policy/v1
name: refunds
defaults:
  decision: deny
  reason: No rule allows this action.
rules:
  - id: small-refunds
    match: { tool: "stripe/create_refund" }
    when: args.amount <= minor("50.00 usd")
    decision: allow
✕ policy.yaml:8:20 · invalid_glob
  stripe/create_refund is not a valid pattern.
  hint: Patterns use * and ? only, with letters, digits and _ . : -.

Fix: tool names are <connector>.<tool>.

    match: { tool: stripe.create_refund }
Section titled “Related”