Skip to content
deedglassdocs

yaml_merge_key

A policy diagnostic from deedglass policy lint and the policy routes.

Severity: error

The file uses a YAML merge key (<<). Like an alias, a merge key hides part of a rule somewhere else, so Deedglass refuses it.

deedglass: policy/v1
name: refunds
defaults:
  decision: deny
  reason: No rule allows this action.
rules:
  - id: large-refunds
    <<: { decision: require_approval }
    match: { tool: stripe.create_refund }
    reason: Refunds wait for a person.
✕ policy.yaml:8:5 · yaml_merge_key
  Merge keys (<<) are not allowed in policies.
  hint: Repeat the keys, so each rule reads on its own.

Fix: write the keys in the rule itself.

  - id: large-refunds
    match: { tool: stripe.create_refund }
    decision: require_approval
    reason: Refunds wait for a person.
Section titled “Related”