message CheckPermissionResponse {
    ZedToken checked_at = 1;
    // Permissionship communicates whether or not the subject has the requested
    // permission or has a relationship with the given resource, over the given
    // relation.
    // 
    // This value will be authzed.api.v1.PERMISSIONSHIP_HAS_PERMISSION if the
    // requested subject is a member of the computed permission set or there
    // exists a relationship with the requested relation from the given resource
    // to the given subject.
    CheckPermissionResponse.Permissionship permissionship = 2;
    // partial_caveat_info holds information of a partially-evaluated caveated response
    PartialCaveatInfo partial_caveat_info = 3;
}