Skip to content
deedglassdocs

unknown_key

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

A key is not part of the language at that place. Deedglass refuses unknown keys instead of ignoring them, because a misspelled key would otherwise do nothing without telling you. The hint suggests the closest valid key, or says where a key belongs (tool goes inside match:). A top-level version: 1 gets this code too, with the hint to use deedglass: policy/v1.

deedglass: policy/v1
name: refunds
defaults:
  decision: deny
  reason: No rule allows this action.
rules:
  - id: small-refunds
    match: { tool: stripe.create_refund }
    when: args.amount <= minor("50.00 usd")
    decison: allow
✕ policy.yaml:10:5 · unknown_key
  Unknown key "decison" in rule "small-refunds".
  hint: Did you mean "decision"?

Fix:

    decision: allow
Section titled “Related”