Skip to content
deedglassdocs

invalid_label

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

A label in match.labels is not valid. Keys use lowercase letters, digits and . _ / - (up to 63 characters, starting with a letter or digit), and values are at most 128 printable characters, the same rules as agent labels.

deedglass: policy/v1
name: refunds
defaults:
  decision: deny
  reason: No rule allows this action.
rules:
  - id: prod-refunds
    match: { tool: stripe.create_refund, labels: { Env: prod } }
    decision: require_approval
    reason: Refunds in production wait for a person.
✕ policy.yaml:8:52 · invalid_label
  Env is not a label key.
  hint: Label keys use lowercase letters, digits and . _ / -, up to 63 characters, like env or team.

Fix:

    match: { tool: stripe.create_refund, labels: { env: prod } }
Section titled “Related”