Sadly our use case is protected medical data housed in a 3rd party repository. Very unlikely we could convince them to ship all data to our systems to establish relationships. Also problematic is the data is created via outside applications, meaning new records are constantly created without authorization tuples. It's trivial to examine the resources as they flow through our systems and assign tuples, but I have no idea how to then "enable" the zanzibar authorization system with any confidence that we have captured all the tuples we need