When using the playground, --caveat-context doesn't work with nested json. Repro: set up a schema then go to the zed terminal in the playground. Try this command: zed permission lookup-resources my_thing read user:example-user --caveat-context {"orgs": {"my_org": []}} However it works if the context isn't a nested object. E.g. this works --caveat-context {"orgs": {}} I haven't yet tested if this is just a playground bug or if it's a cli bug as well