Let me know if these assertions/comments help. https://play.authzed.com/s/r33BAjuKmCNu/assertions I'll read up on the public keyword. Presently, I'm struggling to grok how I'd do a check request against application:1, as it has many combinations of attributes.