the default consistency level for AuthZed and SpiceDB operations is

minimize_latency

, which makes heavy use of caches and thus permissions computations can be "out of date" for up to a few seconds. this is done explicitly to allow for better performance in the 99% case, but as you've seen, it can make read-after-write a bit annoying; to work around that, you can pass a ZedToken (https://authzed.com/docs/reference/zedtokens-and-zookies) to the CheckPermission call to ensure it reflects the recently written/updated relationships