general recommendation is to call your legacy system and either call SpiceDB after that if you don't receive an answer, or pipe the answer from your legacy system as context to SpiceDB via caveats