Is there a

not in

operator, if I'm looking to create an EFFECT_ALLOW if there is not a specific key in a resource attribute?

You should be able to negate it with the

!

operator:

! (x in y)

got it, had some funkiness for a minute there but all good now, thanks!

We also have a REPL where you can quickly try things out: https://docs.cerbos.dev/cerbos/latest/cli/cerbos.html#repl

oh that rules