I see, thank you! I just had this creazy thought, and wanted to check what you think about it: if I really need the lookupwatch api now and don’t really need the watch api in general, would it be stupid to flip subjects and resources in my application? So that I would add my users as resources instead of subjects and my entities as subjects? That way I could just use the already existing watch api to look for changes about what entities a user can access… Is the graph symmetric in this sense? Is it safe to do a switch like this?