From 095337100ecac4fca04d9fe840ab3ee2d7b25a81 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=AE=89=E6=AD=A3=E8=B6=85?= <anzhengchao@gmail.com>
Date: Sun, 17 May 2026 09:41:03 +0800
Subject: [PATCH] test(policy): validate default policies (#2985)

---
 crates/policy/src/policy/policy.rs | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/crates/policy/src/policy/policy.rs b/crates/policy/src/policy/policy.rs
index 8311a8142..0929b9642 100644
--- a/crates/policy/src/policy/policy.rs
+++ b/crates/policy/src/policy/policy.rs
@@ -762,6 +762,15 @@ mod test {
         }
     }
 
+    #[test]
+    fn test_default_policies_validate() {
+        for (name, policy) in default::DEFAULT_POLICIES.iter() {
+            policy
+                .validate()
+                .unwrap_or_else(|err| panic!("default policy {name} should validate: {err}"));
+        }
+    }
+
     #[tokio::test]
     async fn test_deny_only_checks_only_deny_statements() -> Result<()> {
         let data = r#"