Attribute Filter policy. Where am I going wrong?

[Rod Widdowson]

> It's arguably simpler if you do. For example, N-ary OR can be implemented
as
> "iterate over the things, return true for the first one that returns true;
> otherwise false". 0-ary OR ends up being false, of course. No need for
special
> cases.

I know, but that’s why I dislike it.  It turns a misconfiguration into a
success which probably doesn't do anything like what you expect.

R