← Error codes catalogue · All exit codes
Exit code 5: License / entitlement failure¶
A required license capability is missing, or a plugin LicenseValidator
entitlement check failed. Raised by LicenseError (and plugin entitlement
failures).
Common causes
- Config uses
when:but capabilities omitconditional_masking(community mode with an empty capability set, or a plugin that does not grant the token). - Config uses keyed actions (
hmac_hash/pseudonym) withoutkeyed_actions. - Plugin package cannot validate an active License Manager entitlement.
Remediation
- Install a plugin package whose
LicenseValidatorgrants the required capability tokens, or remove the gated fields frommask-rules.yaml. - For subscribed images: confirm the container can reach AWS License Manager and that the entitlement is active.
- See Conditional masking and Keyed actions.