Anders Eknert

No, that's something else :) The `nd` (for "non-deterministic") cache caches the results of non-deterministic built-in functions, like `time.now_ns()`, for the purpose of recording that along with decision logs. This...

Some thoughts: - I tend to think of metadata comments as documenting the "public API" of Rego policies (similar to Javadocs, Go docs, etc). While a file scope makes sense...

This was [intentionally disabled](https://github.com/open-policy-agent/opa/issues/4426) for the purpose of [type checking](https://www.openpolicyagent.org/docs/latest/policy-language/#schema), where the pattern serves no meaningful purpose, but still would have some schemas fail the entire policy compilation process as...

Perhaps I wasn't clear enough — pattern validation was not intentionally disabled for these _built-in functions_. It couldn't have been, as they did not exist at the time 🙂 The...

Hi there, and thanks for filing an issue! It looks like you're pulling in a conftest module to load your policies. ``` opaPolicy "github.com/open-policy-agent/conftest/policy" ``` While this may very well...

👍 Yeah, again, this might very well be something we'll need to fix in OPA too. But let's first see what the conftest folks have to say :)

It's a power user option, so I think option 1 would be fine. #3 is also nice, but I'd probably only do that if some flag was passed to have...

Yesterday I found that the `--timeout` flag set to some low value (like `30ms`) is a pretty good way to find out which tests are the slowest (as those will...

Thanks for creating this! IMHO, **or** should not be limited to boolean results, but rather return the first non-false/undefined value found. If not, we'll still end up with a bunch...

Tbh, the only expectation I could read out of that snippet was `has_phone_number`, but that's only because you named the rule that way. I can't recall seeing OR used that...