PolicyIssueCode
An issue of a Policy, its JDM document or its attachment (1.47.0). The profile (rules-engine.md 4.3): rules_node_type_not_allowed (a function node, a sub-decision or a custom node), rules_function_not_allowed (a function or method outside the allowlist the corpus covers), rules_nondeterministic (a read of the engine's clock: d with fewer than two arguments, date, now, isToday), rules_invalid_pattern (a pattern of matches or extract that is not a literal, or that uses look-around or a back-reference, which the engine's dialect refuses), policy_field_unavailable_at_hook (a field the hook's Call context does not carry), rules_unguarded_field (a compliance-tagged Policy reads a nullable or untyped field without ?? or a null test), rules_output_invalid (an output that is not a parameter of the action type, a resource parameter that is not a literal, a literal its parameter refuses, a required parameter missing, or a context passed through to the output), rules_too_large (over a structural limit, or a cycle) and rules_syntax_error (the engine's own validation, chosen here). Legality (orchestration-layer.md 3.7): illegal_action_for_hook. Warnings: rules_no_catch_all_row (a table of a compliance-tagged Policy with no row that matches everything, chosen here) and redact_after_terminal (chosen here). At Agent version publish: policy_no_active_version, policy_reference_unknown (a Tool the Agent version does not name, or until 1.51.0 a destination), policies_per_hook_exceeded (more than 50 at one hook, a target), raise_event_widens_access and set_setting_not_fail_safe (all but the last two chosen here). The worker, refusing a Session configuration at load (ending the Session policy_load_failed, the code among the finalize warnings): rules_engine_version_mismatch, and from 1.49.0 rules_profile_version_mismatch (a version linted under another profile than the worker's JDM_PROFILE_VERSION), policy_duplicated (a Policy given twice) and policies_per_hook_exceeded (more than 50 at one hook), the codes the worker uses. From 1.51.0, at create, draft update and publish: policy_destination_missing (an attached Policy whose transfer names a destination key the Agent's transfer_destinations lacks, at /policy_ids/<n>). Reserved: engine_incompatible_with_policy. A forbidden detail: policies_admin_required (an organization-scoped write, or disabling a compliance-tagged Policy, without policies:admin; chosen here).
An enumeration of 23 values.
Values
rules_node_type_not_allowedrules_function_not_allowedrules_nondeterministicrules_invalid_patternpolicy_field_unavailable_at_hookrules_unguarded_fieldrules_output_invalidrules_too_largerules_syntax_errorillegal_action_for_hookrules_no_catch_all_rowraise_event_widens_accessset_setting_not_fail_saferules_engine_version_mismatchengine_incompatible_with_policypolicy_no_active_versionpolicy_reference_unknownpolicies_per_hook_exceededredact_after_terminalpolicies_admin_requiredrules_profile_version_mismatchpolicy_duplicatedpolicy_destination_missing