This is a submission for the Permit.io Authorization Challenge: API-First Authorization Reimagined

-- soon to be updated --