https://docs.authzed.com/reference/caveats describes it in more detail