Your route makes sense, but my use case is too critical. We only considered spicedb because we figure we can work with the zookies. It's still unclear from your input on this, if zookies are one-for-all or one-per-relationship. Can't find this info on the docs either. Overall, it appears I'd be better off with a db-based ABAC model where I get to query/write in the same unit of work. If I get anytime to test it out, I might pitch it to the team. Not knowing how zookies work is not a great start. Thanks for sharing your approach.