Error message
In the message, %s marks a value that the engine fills in when it raises the error.
The story
Your manifest describes what your project needs permission to do, but one of the permission lines is written in the wrong shape. Let's go over the rules. There are six axes: reading files, writing files, network, environment, exec, and capabilities. Each one takes a list of quoted texts. For network, for instance, a list with one quoted host and port. An empty list means none. And if you do not write an axis at all, it is granted nothing, so nothing is ever allowed by omission. Now, what breaks the shape? A bare word like yes. A number. A map. An item without quotes. A list that never closes. Rush will not guess what you meant, because a permission that gets reinterpreted quietly is a permission you cannot trust. It refuses before parsing any source file. One more thing worth knowing: rush only parses and exposes these permissions. The rush permissions command prints the result, and the deployment layer enforces it. The message shows the line and the axis. Rewrite the value as a list of quoted texts, and try again.
Text from the Rush engine's error catalogue.