Skip to content
deedglassdocs

reason_missing

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

A rule (or defaults) denies or requires approval but has no reason. The reason is the one sentence the agent, and the person who approves, will see; without it a denial can’t be explained.

deedglass: policy/v1
name: postgres-safe
defaults:
  decision: deny
  reason: No rule allows this action.
rules:
  - id: block-drop
    match: { tool: "postgres.*" }
    when: sql.kind == "drop"
    decision: deny
✕ policy.yaml:10:15 · reason_missing
  Rule "block-drop" denies but has no reason.
  hint: Write the one sentence the agent will see, like "DROP is never allowed for agents."

Fix:

    decision: deny
    reason: DROP is never allowed for agents.
Section titled “Related”