I'm new here. I've played in the sandbox and have a decent working understanding of how Zanzibar works, your DSL for specifying relations, etc, but I'm afraid that didn't make sense to me. We're a moderately large enterprise, and expect to distribute the responsibility for adjusting permissions to managers through the organization for agility. Distributed responsibility means increased risk of error. I'm trying to understand if we have a facility for an administrator to come in and say "not sure what you did, but I didn't like it, let's go back to the world as it was 20 minutes ago"