Method unmatched

pkg/policies/runtime_inputs.go:140–155

unmatched returns the sorted scope keys declared in ri that were never marked (i.e. matched no policy attachment), so the caller can warn about likely typos. Nil-safe.

(ri *RuntimeInputs)

// (i.e. matched no policy attachment), so the caller can warn about likely
// typos. Nil-safe.
func (t *scopeTracker) unmatched(ri *RuntimeInputs) []string {
	if t == nil || ri == nil {
		return nil
	}
	t.mu.Lock()
	defer t.mu.Unlock()

	var out []string
	for scope := range ri.Scoped {
		if _, ok := t.seen[scope]; !ok {
			out = append(out, scope)
		}
	}
	slices.Sort(out)
	return out
}