The short answer is SpiceDB is not currently following the AuthZen proposal, although at some point the team will likely look into what's possible with it. We suspect there is an impedance mismatch as it's inspired from XACML and derivative policy engines. We may be able coerce some of Zanzibar's primitives into things like

context

, but does not seem like a great fit. It's a missed opportunity that folks behind it didn't look beyond the traditional authorization architectures, but it's also not surprising given there are no names from Zanzibar-inspired projects in the proposal, so the project ended up policy-centric.